If you already have an existing key and certificate (for
example, if you are installing the secure server to replace another
company's secure server product), you can probably use your
existing key and certificate with the secure server. The following
two situations provide instances where you are not able to use your
existing key and certificate:
-
If you are changing your IP address or
domain name — Certificates are issued for a particular IP
address and domain name pair. You must get a new certificate if you
are changing your IP address or domain name.
-
If you have a certificate from VeriSign and
you are changing your server software — VeriSign is a
widely used CA. If you already have a VeriSign certificate for
another purpose, you may have been considering using your existing
VeriSign certificate with your new secure server. However, you are
not be allowed to because VeriSign issues certificates for one
specific server software and IP address/domain name
combination.
If you change either of those parameters (for example, if you
previously used a different secure server product), the VeriSign
certificate you obtained to use with the previous configuration
will not work with the new configuration. You must obtain a new
certificate.
If you have an existing key and certificate that you can use,
you do not have to generate a new key and obtain a new certificate.
However, you may need to move and rename the files which contain
your key and certificate.
Move your existing key file to:
/etc/httpd/conf/ssl.key/server.key
|
Move your existing certificate file to:
/etc/httpd/conf/ssl.crt/server.crt
|
After you have moved your key and certificate, skip to Section 26.9 Testing The
Certificate.
If you are upgrading from the Red Hat Secure Web Server, your
old key (httpsd.key) and certificate
(httpsd.crt) are located in /etc/httpd/conf/. Move and rename your key and
certificate so that the secure server can use them. Use the
following two commands to move and rename your key and certificate
files:
mv /etc/httpd/conf/httpsd.key /etc/httpd/conf/ssl.key/server.key
mv /etc/httpd/conf/httpsd.crt /etc/httpd/conf/ssl.crt/server.crt
|
Then, start your secure server with the command:
/sbin/service httpd start
|
You are prompted to enter your passphrase. After you type it in
and press [Enter], the server
starts.
