SSL: Difference between revisions

From CSCWiki
Jump to navigation Jump to search
(Created page with "== GlobalSign == The CSC currently has an SSL Certificate from GlobalSign for *.csclub.uwaterloo.ca provided at no cost to us through IST. GlobalSign likes to take a long time …")
 
Line 5: Line 5:
== Certificate Location ==
== Certificate Location ==


A list of places you'll need to put the new certificate file(s) to keep our services running.
A list of places you'll need to put the new certificate to keep our services running.


* caffeine:/etc/ssl/private/csclub-www-globalsign-wildcard.crt
* caffeine:/etc/ssl/private/csclub-www-globalsign-wildcard.crt

Revision as of 18:18, 12 October 2011

GlobalSign

The CSC currently has an SSL Certificate from GlobalSign for *.csclub.uwaterloo.ca provided at no cost to us through IST. GlobalSign likes to take a long time to respond to certificate signing requests (CSR) for wildcard certs, so our CSR really needs to be handed off to IST at least 2 weeks in advance. Having an invalid cert for any length of time leads to terrible breakage, followed by terrible workarounds and prolonged problems.

Certificate Location

A list of places you'll need to put the new certificate to keep our services running.

  • caffeine:/etc/ssl/private/csclub-www-globalsign-wildcard.crt