Creating Certificates For Apache; Customizing Your Liberty Idp User Interface - Novell eBook Reader Administration Manual

Creating Certificates for Apache

The following steps are provided as an example for how to create two certificates for Apache:

Customizing Your Liberty IDP User Interface

Before putting your Liberty IDP into a production mode, you should modify the look and feel of
your IDP to your own standard, including your company logo, etc. You do this by modifying the
.jsp files that are located in a subdirectory of the application directory you set up during the IDP
installation. For example, if you accepted the installation default directory, the .jsp files would be
located at C:\Program Files\Novell\Tomcat\webapps\nidp\jsp.
The following table is a list of the JSP files that are available for the IDP:
Table 1 JSP Files for the IDP
File Name
login.jsp
30
Liberty Identity Provider for Novell eDirectory
3b
Select the Manage Sites task, then select your site's link.
3c
Change the Base URL Protocol from http to https.
4
Restart Tomcat and Apache for the changes to take effect.
1
Using a DOS prompt, go to your Apache bin directory. (The default location is C:\Program
Files\Novell\Apache\bin.)
This is where the openssl.exe file is located.
2
Create a key file using the following command:
openssl genrsa -out myssl.key 1024
3
Create a signing request file using the following command:
openssl req -new -config openssl.cnf -key myssl.key -out
myssl.csr
4
Send the .csr file to a well-known certificate authority for signing, or self-sign the certificate
using the following command:
openssl x509 -req -days 30 -in myssl.csr -signkey myssl.key -
out myssl.crt
You should now have two (if you are creating a self-signed certificate) or three (if creating a
certificate which is signed by a well-known certificate authority) files: myssl.key, myssl.crt,
and possibly trustedroot.crt.
5
Copy the two or three files to your Apache\conf\ssl directory. (The default location is:
C:\Program Files\Novell\Apache\conf\ssl.)
6
Repeat steps 1-5 to create the same two or three files for the common domain
(mycommonssl.key, mycommonssl.crt, and trustedroot.crt). If they are signed by the same
certificate authority, the trusted root certificate is the same as the one you created for myssl.crt.
7
Modify your Apache configuration files. For examples of how to do this, see
Apache Configuration Files" on page 39.
Definition
Prompts the user to log in.
"Modifying the