Generating A Self-Signed Ssl Certificate For Testing Purposes; Configuring Apache To Point To An Ssl Certificate On An Ifolder Server - Novell IFOLDER 3.7 - ADMINISTRATION Administration Manual

Whichever method you use, the certificate is automatically used for the Apache Web Server
configuration. If it does not automaticially configure the certificate for the Apache Web Server, see
the following:
Section F.3, "Configuring Apache to Point to an SSL Certificate on an iFolder Server," on
page 198
Section F.4, "Configuring Apache to Point to an SSL Certificate on a Shared Volume for an
iFolder Cluster," on page 199
F.2 Generating a Self-Signed SSL Certificate for
Testing Purposes
You can use theYaST CA Management plug-in or OpenSSL tools to create a self-signed certificate.
If iFolder is deployed in a trusted environment, use YaST. The YaST CA Management interface
contains modules for the basic management of X.509 certificates. This mainly involves the creation
of CAs, sub-CAs, and their certificates. For more information, see the following:
Section 6.6.2, "Creating a YaST-based CA," on page 79
Section 6.6.3, "Creating Self-Signed Certificates Using YaST," on page 81
Section 6.6.4, "Exporting Self-Signed Certificates," on page 83
For detailed information about how to manage and update certificates, see
Certification (http://www.novell.com/documentation/sles10/sles_admin/data/cha_yast_ca.html)
the SUSE Linux Enterprise Server 10 Installation and Administration Guide (http://
www.novell.com/documentation/sles10/sles_admin/data/bookinfo_book_sles_admin.html).
For information about configuring Apache to point to the self-signed certificate, see the following:
Section F.3, "Configuring Apache to Point to an SSL Certificate on an iFolder Server," on
page 198
Section F.4, "Configuring Apache to Point to an SSL Certificate on a Shared Volume for an
iFolder Cluster," on page 199
F.3 Configuring Apache to Point to an SSL
Certificate on an iFolder Server
1 Get an SSL certificate from a trusted certificate authority.
2 Create a shared key directory. At a terminal console, enter
mkdir /etc/sharedkey/
Replace
3 Do either of the following:
Copy the private key (
location. At a terminal console, enter
cp ./filename.key /etc/sharedkey/
cp ./filename.cert /etc/sharedkey/
Replace
destination path with the shared key directory location where you want to store the
and
198 OES 2 SP1: Novell iFolder 3.7 Administration Guide
with the actual name of your key directory.
sharedkey
file) and the certificate (
.key
with the actual file name of your
filename
files.
.cert
Managing X.509
file) to the shared key directory
.cert
and files. Replace the
.key .cert
in
.key