Certificate

From SME Server
Revision as of 07:58, 24 April 2007 by Berdie (talk | contribs) (New page: {{Languages}} {{Overview}} __NOTOC__ =Custom Certificate for SME 7.x= ==Maintainer== Dietmar Berteld<br/> mailto:dietmar@berteld.com This RPM is based on [http://distr...)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search


Template:Overview

Custom Certificate for SME 7.x

Maintainer

Dietmar Berteld
mailto:dietmar@berteld.com

This RPM is based on Nick Critton's great howto. Thanks a lot Nick for your brillant work!

Description

With this RPM-package you can simply set up a new SSL certificate on your SME7 server with a custom Common Name. When installing SME Server, you get a default certificate with the information http://www.xyzcorp.xxx/ and XYZ Corporation. With this package, the certificate information will be updated with the following informations:

  • FQDN (Full Qualified Domain Name), which is SystemName.DomainName', e.g. home.myserver.com
  • City, which depends on your given info in server manager's directory section
  • Company, which depends on your given info in server manager's directory section
  • Department, which depends on your given info in server manager's directory section
  • E-Mail, which is admin@FQDN

The default length of time for this certificate is 365 days.


Download

You can download this package at smeserver-certificate . If you would like to save it directly on your SME Server, you should give this command at a linux-prompt

wget http://sudemo.info/sme/sme7/config/smeserver-certificate-1.0-1.noarch.rpm 

Installation and Uninstall

For installation just hit the following command

yum localinstall smeserver-certificate-1.0-1.noarch.rpm 

For uninstall just hit the following command

yum remove smeserver-certificate

You can ignore the yum-comments signal event post-upgrade and signal-event reboot.

Use

The package installs a custom template in

/etc/e-smith/templates-custom/home/e-smith/ssl.crt 

With the Custom Template installed the cert will be rebuilt if:

  • $defaultCity
  • $defaultCompany
  • $defaultDepartment
  • $domainName

are changed.

So normally you don't have to do nothing in addition.

Tips

To change the length of time before a certificate expires, change Line 2 of the ssl.crt script

use constant KEYLIFEINDAYS => 365;

Change 365 to the number of days to expire by (2Years = 730, 3Years = 1095, etc.)

use constant KEYLIFEINDAYS => 730;

You can change your desired Common Name (FQDN) in line 12. For doing this, change the default info

my $CommonName = $FQDN;

to your desired name

my $CommonName = special.myserver.com;


After changing your infos, you have to update your certificate manually with

signal-event domain-modify
signal-event email-update 


Additional information

For additional information see this thread.


Have much fun with your own certificate !

Dietmar Berteld (berdie)