Geotrust will email you your certificate. If the certificate is an attachment (Cert.cer), you can use the file. If the certificate is in the body of the email, copy and paste it into a text file (such as OriginalCert.txt) using vi or Notepad. Do not use Microsoft Word or other word processing programs that may add characters. Confirm that there are no extra lines or spaces in the file. If necessary, move the file to the server machine.
- To follow the naming convention for Apache, rename the certificate filename with the .crt extension. For example: cert.crt
- Copy your Certificate into the directory that you will be using to hold your certificates. For example: /usr/local/ssl/crt/.
Configure the Server
In order to use the key pair, you must update the httpd.conf file.
In the Virtual Host settings for your site, in the httpd.conf file, add the following SSL directives:
SSLCertificateFile /usr/local/ssl/crt/cert.crt (this line tells Apache how to find the Certificate File)
SSLCertificateKeyFile /usr/local/ssl/private/private.key (this line tells Apache where the private key is located)
If you are using a different location and certificate file names than the example above (and most likely you are) you must change the path and filename to reflect your server.
Save your httpd.conf file and restart Apache. You can most likely do so by using the apachectl script:
apachectl stop
apachectl startssl
You are now ready to use your Geotrust certificate with your Apache-SSL Server.
Disclaimer:
Firehost has made efforts to ensure the accuracy and completeness of the information in this document. However, Firehost makes no warranties of any kind (whether express, implied or statutory) with respect to the information contained herein. Firehost assumes no liability to any party for any loss or damage (whether direct or indirect) caused by any errors, omissions, or statements of any kind contained in this document.
Further, Firehost assumes no liability arising from the application or use of the product or service described herein and specifically disclaims any representation that the products or services described herein do not infringe upon any existing or future intellectual property rights. Nothing herein grants the reader any license to make, use, or sell equipment or products constructed in accordance with this document. Finally, all rights and privileges related to any intellectual property right described herein are vested in the patent, trademark, or service mark owner, and no other person may exercise such rights without express permission, authority, or license secured from the patent, trademark, or service mark owner. Firehost reserves the right to make changes to any information herein without further notice.
