Bug #2975
Use SSLCACertificateFile directive in apache instead of SSLCACertificatePath
Status:
Closed
Priority:
Normal
Assignee:
Category:
d1_cn_buildout
Target version:
Start date:
2012-06-19
Due date:
% Done:
100%
Milestone:
CCI-1.0.3
Product Version:
*
Story Points:
Sprint:
Description
We should discuss the option of concatenating all CA files together (cilogon + DataONE) into a single pem file. One for Production machines and one for Testing machines.
History
#1 Updated by Robert Waltz over 12 years ago
- Target version changed from Sprint-2012.25-Block.4.1 to Sprint-2012.27-Block.4.2
- Milestone changed from CCI-1.0.2 to CCI-1.0.3
#2 Updated by Robert Waltz over 12 years ago
- Target version changed from Sprint-2012.27-Block.4.2 to Sprint-2012.29-Block.4.3
#3 Updated by Robert Waltz over 12 years ago
- Assignee changed from Robert Waltz to Chris Jones
#4 Updated by Chris Jones over 12 years ago
- Subject changed from Use SSLCertificateChainFile directive in apache instead of SSLCACertificatePath to Use SSLCACertificateFile directive in apache instead of SSLCACertificatePath
- Status changed from New to Closed
dave concatenated the DataONETestCA certificate and the DataONETestIntCA certificate into a DataONETestCAChain.crt file, and I've added the Cilogon CA certs to that file as well. I've changed the dataone-cn-os-core postinst script to now set the correct chain file name in the cn-ssl virtual host configuration, either the production chain or the test chain. The names are pre-configured in the per-environment debian configuration files.
