Brocade Communications Systems ServerIron ADX 12.4.00a - Manual (Page 160)

146 ServerIron ADX Security Guide
53-1002440-03
Configuring SSL on a ServerIron ADX
6
12. You can now begin copying the certificates and the key pair files to the ServerIronADX (in the
following order):
scp ./server-key.pem [email protected]:sslkeypair:server-key:foundry:pem
scp ./server-cert.cer [email protected]:sslcert:certchain1:pem
Unix (Apache)
The following procedure describes the procedure for determining the location of the private key and
certificate files and copying them to a ServerIronADX.
1. On the Apache server, look in the httpd.config file for the following directives; they point to the
location of the key and certificate files:
SSLCertificateFile .../path/to/mycertfile.crt
SSLCertificateKeyFile .../path/to/mykeyfile.key
NOTE
The default location of the httpd.config file is: /etc/httpd/conf/httpd.conf
2. When you have located the key and certificate files, copy them from the Linux server to the
ServerIronADX:
scp ./server-key.key [email protected]:sslkeypair:server-key:foundry:pem
scp ./server-cert.crt [email protected]:sslcert:certchain1:pem
scp ./root-cert.crt [email protected]:sslcert:certchain1:pem
Make sure you upload in the same order as the CA hierarchy – only then can the chain be
established properly on the ServerIron.
NOTE
You must upload all of the chain certificates into the same file on the ServerIronADX.
Bag Attributes: <Empty Attributes>
subject=/DC=org/DC=test/O=root/OU=Security/CN=root
issuer=/DC=org/DC=test/O=root/OU=Security/CN=root
-----BEGIN CERTIFICATE-----
MIIC1TCCAj6gAwIBAgIQJhB5wR9FdbXPEWcLp/1MAjANBgkqhkiG9w0BAQUFADBm
MRMwEQYKCZImiZPyLGQBGRYDb3JnMRgwFgYKCZImiZPyLGQBGRYIam9uZGF2aXMx
EDAOBgNVBAoTB1Rla2VsZWMxETAPBgNVBAsTCFNlY3VyaXR5MRAwDgYDVQQDEwdU
ZWtlbGVjMB4XDTA1MDQxOTAxMTk1OFoXDTA3MDgwNzE3NDM1OFowZjETMBEGCgmS
JomT8ixkARkWA29yZzEYMBYGCgmSJomT8ixkARkWCGpvbmRhdmlzMRAwDgYDVQQK
EwdUZWtlbGVjMREwDwYDVQQLEwhTZWN1cml0eTEQMA4GA1UEAxMHVGVrZWxlYzCB
nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAq36AVcI33Pp9tPjuN2Dx81BIiUTx
ZENHS/0ZL4RREj+BfZG3/J94cE0i5F6l0X9W6jJpUM8sqUVqpounwB6ZeoXHJsQJ
Hvzp1YR77ABS1gR//b9N3TiIXGyb8oaoXdT4xahzfwMTTjOGAGl3xYHC/QdXi3x6
ff+X02AddhIvhaMCAwEAAaOBgzCBgDAMBgNVHRMEBTADAQH/MCAGA1UdJQEB/wQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCAQYwHwYDVR0jBBgw
FoAUVu5XQurF4Y0JQy/kr4y4eHzhucEwHQYDVR0OBBYEFFbuV0LqxeGNCUMv5K+M
uHh84bnBMA0GCSqGSIb3DQEBBQUAA4GBAFCldN7DHtztK2hdiUp1KO1LtO9Ics9g
mjVH869i6qxVOj+YzGfBlz7PvNdW+Nv0TCrrXTLXgZpd1aAW/lTajBfLgFs21Xkf
xSquYFYEcZjz4Uu3gMuuAiS963Xissy+MIyNJpkRP1NpYY75lXAf05sLopzcmdVc
C2es4LOJQbhZ
-----END CERTIFICATE-----