How do I change the certificate

Question
1

We are running a token server that is issued to the server. We need to
change this to be issued to the name of the site. How do I this? I am a
newb when it comes to this stuff.

Thanks

2

Thanks - I was just coming back to say we can disregard this but you beat
me to it. I was able to take my existing certs / key from production and
rename them privacyideaserver.pem & .key, restart apache2 and it worked.On Tuesday, June 2, 2015 at 3:18:28 PM UTC-4, Cornelius Kölbel wrote:

Hello Tom,

you can see a short note about certificates here:

https://help.ubuntu.com/14.04/serverguide/certificates-and-security.html

The key task is to create a certificate signing request. In the
certificate signing request you can specify the servername (CN).

You then can decide, if you use the certificate signing request (CSR) to
create a self-signed-certificate or if you take the CSR and got to a
certificate authority (either your companys or s.t. verisign, comodo,
startcom…)

Then you need to copy the server.key (your private key, which you should
not give to anybody else) and the signed certificate to the
corresponding locations.

These are defined in the Apache config file, which is located
at /etc/apache2/sites-enabled/privacyidea.conf.

    SSLCertificateFile    /etc/ssl/certs/privacyideaserver.pem 
    SSLCertificateKeyFile /etc/ssl/private/privacyideaserver.key

Kind regards
Cornelius

Am Dienstag, den 02.06.2015, 10:58 -0700 schrieb Tom Cole:

We are running a token server that is issued to the server. We need
to change this to be issued to the name of the site. How do I this?
I am a newb when it comes to this stuff.

Thanks

–
You received this message because you are subscribed to the Google
Groups “privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send
an email to privacyidea...@googlegroups.com <javascript:>.
To post to this group, send email to priva...@googlegroups.com
<javascript:>.
To view this discussion on the web visit

https://groups.google.com/d/msgid/privacyidea/71cad8e0-34b6-4bb5-abb6-38d6b5319edb%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

–
Cornelius Kölbel
corneliu…@netknights.it <javascript:>
+49 151 2960 1417

NetKnights GmbH
http://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel

3

Hello Tom,

you can see a short note about certificates here:

https://help.ubuntu.com/14.04/serverguide/certificates-and-security.html

The key task is to create a certificate signing request. In the
certificate signing request you can specify the servername (CN).

You then can decide, if you use the certificate signing request (CSR) to
create a self-signed-certificate or if you take the CSR and got to a
certificate authority (either your companys or s.t. verisign, comodo,
startcom…)

Then you need to copy the server.key (your private key, which you should
not give to anybody else) and the signed certificate to the
corresponding locations.

These are defined in the Apache config file, which is located
at /etc/apache2/sites-enabled/privacyidea.conf.

SSLCertificateFile    /etc/ssl/certs/privacyideaserver.pem
SSLCertificateKeyFile /etc/ssl/private/privacyideaserver.key

Kind regards
CorneliusAm Dienstag, den 02.06.2015, 10:58 -0700 schrieb Tom Cole:

We are running a token server that is issued to the server. We need
to change this to be issued to the name of the site. How do I this?
I am a newb when it comes to this stuff.

Thanks

–
You received this message because you are subscribed to the Google
Groups “privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send
an email to privacyidea+unsubscribe@googlegroups.com.
To post to this group, send email to privacyidea@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/71cad8e0-34b6-4bb5-abb6-38d6b5319edb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

–
Cornelius Kölbel
@cornelinux
+49 151 2960 1417

NetKnights GmbH
http://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel

signature.asc (819 Bytes)