Project

General

Profile

Bug #2975

Use SSLCACertificateFile directive in apache instead of SSLCACertificatePath

Added by Robert Waltz almost 12 years ago. Updated over 11 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
d1_cn_buildout
Start date:
2012-06-19
Due date:
% Done:

100%

Milestone:
CCI-1.0.3
Product Version:
*
Story Points:
Sprint:

Description

We should discuss the option of concatenating all CA files together (cilogon + DataONE) into a single pem file. One for Production machines and one for Testing machines.

History

#1 Updated by Robert Waltz almost 12 years ago

  • Target version changed from Sprint-2012.25-Block.4.1 to Sprint-2012.27-Block.4.2
  • Milestone changed from CCI-1.0.2 to CCI-1.0.3

#2 Updated by Robert Waltz over 11 years ago

  • Target version changed from Sprint-2012.27-Block.4.2 to Sprint-2012.29-Block.4.3

#3 Updated by Robert Waltz over 11 years ago

  • Assignee changed from Robert Waltz to Chris Jones

#4 Updated by Chris Jones over 11 years ago

  • Subject changed from Use SSLCertificateChainFile directive in apache instead of SSLCACertificatePath to Use SSLCACertificateFile directive in apache instead of SSLCACertificatePath
  • Status changed from New to Closed

dave concatenated the DataONETestCA certificate and the DataONETestIntCA certificate into a DataONETestCAChain.crt file, and I've added the Cilogon CA certs to that file as well. I've changed the dataone-cn-os-core postinst script to now set the correct chain file name in the cn-ssl virtual host configuration, either the production chain or the test chain. The names are pre-configured in the per-environment debian configuration files.

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 14.8 MB)