Maintenance of SSL Certificate

This page lists links to a number of pages I presented elsewhere with different subsets expanded. In the collapsed form here, readers can select the details they wish to see.

Alternative "View" of this Page

• CertificateUpdates.

Useful command for examining and manipulating SSL certificates

• openssl - education by example
• CertOpensslToy - education by degenerative examples

Obtaining New or Renewed Certificates

• Generate a Private Key - no longer optional
• Generate a CSR
  • might need instead Generate a CSR with Alternative Names
  • perhaps see this note about AltNames
• Send CSR to GlobalSign
• Receive Certificate by email from GlobalSign
  • includes OrganizationSSL Intermediate Root Certificate

Installing and Testing

• Actually install or update Certificate - much to be added here
  • Certificate Location under xhier
  • inetd daemon format - certificate file format used for inetd daemons
  • Web and SMTP daemon format - certificate file format used for web and smtp daemons
• Testing
  • use openssl command to test installations
  • test https connection
    • Use Firefox to Extract Certificates
  • test imap connection

-- AdrianPepper - 2013-Jul-08
-- AdrianPepper - 2021-Oct-20