WikiAdmin at 18:37, 26 March 2014

2014-03-26T18:37:01Z

WikiAdmin at 18:33, 26 March 2014

2014-03-26T18:33:49Z

WikiAdmin at 18:33, 26 March 2014

2014-03-26T18:33:19Z

188.107.134.155 at 07:56, 5 September 2012

2012-09-05T07:56:17Z

WikiAdmin at 08:13, 4 September 2012

2012-09-04T08:13:10Z

WikiAdmin at 08:05, 4 September 2012

2012-09-04T08:05:27Z

WikiAdmin at 08:04, 4 September 2012

2012-09-04T08:04:24Z

188.107.134.155: Created page with "{{Sidebar}} NOTOC

Creating a SSL certificate

Before creating a SSL certificate you first have to create a CSR file. When creating a CSR file, please note that ..."

2012-09-04T07:51:39Z

Created page with "{{Sidebar}} __NOTOC__ <h2>Creating a SSL certificate</h2> Before creating a SSL certificate you first have to create a CSR file. When creating a CSR file, please note that ..."

New page

{{Sidebar}}
__NOTOC__

<h2>Creating a SSL certificate</h2>

Before creating a SSL certificate you first have to create a CSR file. When creating a CSR file, please note that only the following local parts of the email adresse are allowed: '''admin''', '''administrator''', '''hostmaster''', '''postmaster''', '''root''', '''webmaster''' should be used for the certificate registration.

A documentation on howto create a CSR-file can be found here: [[How to create a CSR-file]]

For a basic CreateSSLCert command only a few parameters are required ''(Requirements for the CreateSSLCert command can be different for specific SSLCERT products.)''.

{{Warnbox| '''IMPORTANT:''' Please have a look at the {{Template:Pdf|SSLCERT_API_Reference.pdf| SSLCERT API-Manual}} for a current list of allowed parameters.}}

<b>All available parameters:</b>
<pre>
(required)
command = CreateSSLCert
sslcertclass = <TEXT>
period = <INT>

sslcertdomain = <TEXT> | <NULL>
csr# = <TEXT> | <NULL>
serversoftware = APACHESSL | APACHESSLEAY | APACHE2 | IIS
alternatecn# = <TEXT> | <NULL>
slottype = <TEXT> | <NULL>

organization = <TEXT> | <NULL>
firstname = <TEXT> | <NULL>
lastname = <TEXT> | <NULL>
street = <TEXT> | <NULL>
zip = <TEXT> | <NULL>
city = <TEXT> | <NULL>
country = <TEXT> | <NULL>
province = <TEXT> | <NULL>
jobtitle = <TEXT> | <NULL>
phone = <TEXT> | <NULL>
fax = <TEXT> | <NULL>
email = <TEXT> | <NULL>

admincontactorganization = <TEXT> | <NULL>
admincontactfirstname = <TEXT> | <NULL>
admincontactlastname = <TEXT> | <NULL>
admincontactstreet = <TEXT> | <NULL>
admincontactzip = <TEXT> | <NULL>
admincontactcity = <TEXT> | <NULL>
admincontactcountry = <TEXT> | <NULL>
admincontactprovince = <TEXT> | <NULL>
admincontactjobtitle = <TEXT> | <NULL>
admincontactphone = <TEXT> | <NULL>
admincontactfax = <TEXT> | <NULL>
admincontactemail = <TEXT> | <NULL>

techcontactorganization = <TEXT> | <NULL>
techcontactfirstname = <TEXT> | <NULL>
techcontactlastname = <TEXT> | <NULL>
techcontactname = <TEXT> | <NULL>
techcontactstreet = <TEXT> | <NULL>
techcontactzip = <TEXT> | <NULL>
techcontactcity = <TEXT> | <NULL>
techcontactcountry = <TEXT> | <NULL>
techcontactprovince = <TEXT> | <NULL>
techcontactjobtitle = <TEXT> | <NULL>
techcontactphone = <TEXT> | <NULL>
techcontactfax = <TEXT> | <NULL>
techcontactemail = <TEXT> | <NULL>

billingcontactorganization = <TEXT> | <NULL>
billingcontactfirstname = <TEXT> | <NULL>
billingcontactlastname = <TEXT> | <NULL>
billingcontactname = <TEXT> | <NULL>
billingcontactstreet = <TEXT> | <NULL>
billingcontactzip = <TEXT> | <NULL>
billingcontactcity = <TEXT> | <NULL>
billingcontactcountry = <TEXT> | <NULL>
billingcontactprovince = <TEXT> | <NULL>
billingcontactjobtitle = <TEXT> | <NULL>
billingcontactphone = <TEXT> | <NULL>
billingcontactfax = <TEXT> | <NULL>
billingcontactemail = <TEXT> | <NULL>
</pre>

RESPONSE
<pre>
(required)
code = (CODE)
description = (DESCRIPTION)
property[sslcertid][0] = (TEXT)
</pre>

<h2>Examples</h2>

<h3>Thawte SSL certificates</h3>

<h4>Ordering a standard Thawte SSL-123 certificate</h4>

The following command shows you how to order a Thawte SSL-123 certificate.

<pre>
command = CreateSSLCert
sslcertclass = THAWTE_SSL123
period = 1
csr0 =-----BEGIN CERTIFICATE REQUEST-----
csr1 =MIICxjCCAa4CAQAwgYAxCzAJBgNVBAYTAkRFMRAwDgYDVQQIEwdQcm92aWNlMQ0w
csr2 =CwYDVQQHEwRDaXR5MRUwEwYDVQQKEwxFeGFtcGxlIEdtYkgxGDAWBgNVBAMTD3d3
csr3 =dy5leGFtcGxlLmNvbTEfMB0GCSqGSIb3DQEJARYQaW5mb0BleGFtcGxlLmNvbTCC
csr4 =ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMeWGKlf6S/7ku2SxSdcxT8d
csr5 =OS+zA3KWxibaKmXkh3ySBFsnKQeqRChTffilGGYUJ0YbFDrMwwkaHEbJ3UkHx2zb
csr6 =MbmXCYEw31qCPm+AN1xvEW6sovzL5hnamMsichlsNrvUbh5WnVrSUo9ZUgMkqiOh
csr7 =b5o649MazWMsyZ22EVM7JmmYYscc9Qzq+//ZWMpCAnoWITADsurpNZ5Yh0UkCfxY
csr8 =GhBjyMeZTnzNexTCzrOGmcv0Rzbmb39+cOcCNbnavwxbBnG52fVeuqz+xkDzdnDi
csr9 =vYeVckbtCTr+CmqKtBYxnItIm+PEYmhtvbHFf/9+qyNjzpRHMzSDFOGSzWCl0tEC
csr10 =AwEAAaAAMA0GCSqGSIb3DQEBBQUAA4IBAQBz4iUEI/QlJUqOeYB/KF1tVbg/9hRg
csr11 =WuJy740RunHWS8CF89RPhZO2bTGXPWhfXcbWBTGMdmww9B3GONYNS662Q0B1Xido
csr12 =OSA4M77s41GPiIyOMf3CRU27m0ubpUNfoKwxq2Xj7drgqfBOWRKR0JpD5CugqEbG
csr13 =Nc4EbNeA++/dMzQ1feeT7gQbyfncC/J1VDtSSUP1hjXfDzYwgsQ45bwcrbcuLIvr
csr14 =yRGJ+XdKC4hlXG7ZtMu+OAH4RSAmRCW5RCs3JqWPmVzFAhLn2ga0U/Oxzraqbcuh
csr15 =zdpHXuhFE31q0NGLNRt2gNSCa41pUyTgubM0Q5Jm5TaG8i0Or0ZxjpnY
csr16 =-----END CERTIFICATE REQUEST-----
serversoftware = APACHESSL
organization = Example GmbH
firstname = Max
lastname = SSLTester
street = Streetname
zip = 12345
city = Testcity
province = Berlin
country = DE
jobtitle = CEO
phone = 0686545566
fax = 0686545566
email = admin@example.com
</pre>

<h3>Starfield SSL certificates</h3>

<h4>Ordering a Starfield Standard certificate</h4>

The following command shows you how to order a Starfield Standard certificate.

<pre>
command = CreateSSLCert
sslcertclass = STARFIELD_STANDARD
period = 1
csr0 =-----BEGIN CERTIFICATE REQUEST-----
csr1 =MIICxjCCAa4CAQAwgYAxCzAJBgNVBAYTAkRFMRAwDgYDVQQIEwdQcm92aWNlMQ0w
csr2 =CwYDVQQHEwRDaXR5MRUwEwYDVQQKEwxFeGFtcGxlIEdtYkgxGDAWBgNVBAMTD3d3
csr3 =dy5leGFtcGxlLmNvbTEfMB0GCSqGSIb3DQEJARYQaW5mb0BleGFtcGxlLmNvbTCC
csr4 =ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMeWGKlf6S/7ku2SxSdcxT8d
csr5 =OS+zA3KWxibaKmXkh3ySBFsnKQeqRChTffilGGYUJ0YbFDrMwwkaHEbJ3UkHx2zb
csr6 =MbmXCYEw31qCPm+AN1xvEW6sovzL5hnamMsichlsNrvUbh5WnVrSUo9ZUgMkqiOh
csr7 =b5o649MazWMsyZ22EVM7JmmYYscc9Qzq+//ZWMpCAnoWITADsurpNZ5Yh0UkCfxY
csr8 =GhBjyMeZTnzNexTCzrOGmcv0Rzbmb39+cOcCNbnavwxbBnG52fVeuqz+xkDzdnDi
csr9 =vYeVckbtCTr+CmqKtBYxnItIm+PEYmhtvbHFf/9+qyNjzpRHMzSDFOGSzWCl0tEC
csr10 =AwEAAaAAMA0GCSqGSIb3DQEBBQUAA4IBAQBz4iUEI/QlJUqOeYB/KF1tVbg/9hRg
csr11 =WuJy740RunHWS8CF89RPhZO2bTGXPWhfXcbWBTGMdmww9B3GONYNS662Q0B1Xido
csr12 =OSA4M77s41GPiIyOMf3CRU27m0ubpUNfoKwxq2Xj7drgqfBOWRKR0JpD5CugqEbG
csr13 =Nc4EbNeA++/dMzQ1feeT7gQbyfncC/J1VDtSSUP1hjXfDzYwgsQ45bwcrbcuLIvr
csr14 =yRGJ+XdKC4hlXG7ZtMu+OAH4RSAmRCW5RCs3JqWPmVzFAhLn2ga0U/Oxzraqbcuh
csr15 =zdpHXuhFE31q0NGLNRt2gNSCa41pUyTgubM0Q5Jm5TaG8i0Or0ZxjpnY
csr16 =-----END CERTIFICATE REQUEST-----
serversoftware = APACHESSL
organization = Example GmbH
firstname = Max
lastname = SSLTester
street = Streetname
zip = 12345
city = Testcity
province = Berlin
country = DE
jobtitle = CEO
phone = 0686545566
fax = 0686545566
email = admin@example.com
</pre>

<h4>Ordering a Starfield Standard Unified certificate</h4>

The following command shows you how to order a Starfield Standard Unified certificate.

<pre>
command = CreateSSLCert
sslcertclass = STARFIELD_STANDARD_UNIFIED
period = 1
csr0 =-----BEGIN CERTIFICATE REQUEST-----
csr1 =MIICxjCCAa4CAQAwgYAxCzAJBgNVBAYTAkRFMRAwDgYDVQQIEwdQcm92aWNlMQ0w
csr2 =CwYDVQQHEwRDaXR5MRUwEwYDVQQKEwxFeGFtcGxlIEdtYkgxGDAWBgNVBAMTD3d3
csr3 =dy5leGFtcGxlLmNvbTEfMB0GCSqGSIb3DQEJARYQaW5mb0BleGFtcGxlLmNvbTCC
csr4 =ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMeWGKlf6S/7ku2SxSdcxT8d
csr5 =OS+zA3KWxibaKmXkh3ySBFsnKQeqRChTffilGGYUJ0YbFDrMwwkaHEbJ3UkHx2zb
csr6 =MbmXCYEw31qCPm+AN1xvEW6sovzL5hnamMsichlsNrvUbh5WnVrSUo9ZUgMkqiOh
csr7 =b5o649MazWMsyZ22EVM7JmmYYscc9Qzq+//ZWMpCAnoWITADsurpNZ5Yh0UkCfxY
csr8 =GhBjyMeZTnzNexTCzrOGmcv0Rzbmb39+cOcCNbnavwxbBnG52fVeuqz+xkDzdnDi
csr9 =vYeVckbtCTr+CmqKtBYxnItIm+PEYmhtvbHFf/9+qyNjzpRHMzSDFOGSzWCl0tEC
csr10 =AwEAAaAAMA0GCSqGSIb3DQEBBQUAA4IBAQBz4iUEI/QlJUqOeYB/KF1tVbg/9hRg
csr11 =WuJy740RunHWS8CF89RPhZO2bTGXPWhfXcbWBTGMdmww9B3GONYNS662Q0B1Xido
csr12 =OSA4M77s41GPiIyOMf3CRU27m0ubpUNfoKwxq2Xj7drgqfBOWRKR0JpD5CugqEbG
csr13 =Nc4EbNeA++/dMzQ1feeT7gQbyfncC/J1VDtSSUP1hjXfDzYwgsQ45bwcrbcuLIvr
csr14 =yRGJ+XdKC4hlXG7ZtMu+OAH4RSAmRCW5RCs3JqWPmVzFAhLn2ga0U/Oxzraqbcuh
csr15 =zdpHXuhFE31q0NGLNRt2gNSCa41pUyTgubM0Q5Jm5TaG8i0Or0ZxjpnY
csr16 =-----END CERTIFICATE REQUEST-----
slottype = 4
alternatecn0 = mail.example.com
alternatecn1 = intranet.example.com
alternatecn2 = webinterface.example.com
serversoftware = APACHESSL
organization = Example GmbH
firstname = Max
lastname = SSLTester
street = Streetname
zip = 12345
city = Testcity
province = Berlin
country = DE
jobtitle = CEO
phone = 0686545566
fax = 0686545566
email = admin@example.com
</pre>

<h2>How install a SSL certificate in your webserver</h2>

<h3>Apache</h3>

1. Copy the certificate to the directory that you designate. This is the directory in which you plan to store your certificate. <br>
''(Default: /usr/local/apache/conf/ssl.crt or /etc/httpd/conf/ssl.crt)''

2. Open the '''httpd.conf''' file in a text editor.

3. Locate the secure virtual host pertaining to your order. You should have the following directives within this virtual host. Please add them if you do not.
<pre>
SSLCertificateFile /usr/local/apache/conf/ssl.crt/mydomain.com.crt
SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/mydomain.com.key
</pre>

'''Only for ''Comodo'' or ''Starfield'' certificates:'''
<pre>
SSLCertificateChainFile /usr/local/apache/conf/ssl.key/mydomain.com.ca
</pre>

4. Save the changes and exit the editor.

5. Start or Restart your apache Web server. <br>
''(Default: /usr/local/apache/bin/apachectl startssl or /usr/local/apache/bin/apachectl restart).''

6. Test your certificate by connecting to your server. Use the https protocol directive (e.g. https://yourserver/) to indicate you wish to use secure HTTP.

{{Warnbox| '''IMPORTANT:''' Please note that depending on your operating system the location of the webservers configuration files can be different.}}

<h3>Apache 2</h3>

1. Copy the certificate to the directory that you designate. This is the directory in which you plan to store your certificate. <br>
''(Default: /usr/local/apache2/conf/ssl.crt)''

2. Open the '''apache2.conf''' file in a text editor.

3. Locate the secure virtual host pertaining to your order. You should have the following directives within this virtual host. Please add them if you do not.
<pre>
SSLCertificateFile /usr/local/apache2/conf/ssl.crt/mydomain.com.crt
SSLCertificateKeyFile /usr/local/apache2/conf/ssl.key/mydomain.com.key
</pre>

'''Only for ''Comodo'' or ''Stafield'' certificates:'''
<pre>
SSLCertificateChainFile /usr/local/apache/conf/ssl.key/mydomain.com.ca
</pre>

4. Save the changes and exit the editor.

5. Start or Restart your apache Web server.<br>
''(Default: /usr/local/apache2/bin/apachectl stop and /usr/local/apache2/bin/apachectl start).''

6. Test your certificate by connecting to your server. Use the https protocol directive (e.g. https://yourserver/) to indicate you wish to use secure HTTP.

Further details can be found in the [http://httpd.apache.org/docs/2.0/ssl/ssl_howto.html official apache documentation]

{{Warnbox| '''IMPORTANT:''' Please note that depending on your operating system the location of the webservers configuration files can be different.}}

<h3>Microsoft IIS</h3>

1. Select '''Administrative Tools'''.

2. Start '''Internet Services Manager'''.

<p>[[Image:iis1.jpg]]</p>

3. Open the properties window for the website. You can do this by right clicking on the Default Website and selecting Properties from the menu.

4. Open '''Directory Security''' by right clicking on the Directory Security tab

<p>[[Image:iis2.jpg]]</p>

5. Click '''Server Certificate'''. The following Wizard will appear:

<p>[[Image:iis3.jpg]]</p>

6. Choose to Process the Pending Request and Install the Certificate. Click '''Next'''.

7. Enter the location of your SSL certificate (you may also browse to locate your IIS SSL certificate), and then click '''Next'''.

8. Read the summary screen to be sure that you are processing the correct certificate, and then click '''Next'''.

9. You will see a confirmation screen. When you have read this information, click '''Next'''.

10. You now have an IIS SSL server certificate installed.

{{Warnbox| '''IMPORTANT:''' You must now restart the computer to complete the install}}

If you need to install the Root and Intermediate certificates manually, please [https://support.comodo.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=487 see manual installation of Root and Intermediate Certificates].

← Older revision		Revision as of 08:05, 4 September 2012
Line 292:		Line 292:
	4. Open '''Directory Security''' by right clicking on the Directory Security tab		4. Open '''Directory Security''' by right clicking on the Directory Security tab

−	<p>[[Image:~~iis2~~.~~jpg~~]]</p>	+	<p>[[Image:Iis_csr2.jpg‎]]</p>

@@ Line 9: / Line 9: @@
-Please have a look at the {{Template:Pdf|SSLCERT_API_Reference.pdf| SSLCERT API-Manual}} for a current list of allowed parameters.
+Please have a look at the {{Template:Pdf|XIRCA_SSLCERT_API_Reference1.1.pdf| SSLCERT API-Manual}} for a current list of allowed parameters.
-−
 <b>All available parameters:</b>

@@ Line 8: / Line 8: @@
 For a basic CreateSSLCert command only a few parameters are required ''(Requirements for the CreateSSLCert command can be different for specific SSLCERT products.)''.
-{{Infobox| Please have a look at the {{Template:Pdf|SSLCERT_API_Reference.pdf| SSLCERT API-Manual}} for a current list of allowed parameters.}}
+Please have a look at the {{Template:Pdf|SSLCERT_API_Reference.pdf| SSLCERT API-Manual}} for a current list of allowed parameters.
 <b>All available parameters:</b>

@@ Line 1: / Line 1: @@
-{{Sidebar}}
+{{Sidebar}}__NOTOC__
 __NOTOC__
-−
-−
 <h2>Creating a SSL certificate</h2>

@@ Line 286: / Line 286: @@
 . Start '''Internet Services Manager'''.
-<p>[[Image:iis1.jpg]]</p>
+<p>[[Image:Iis_csr1.jpg‎]]</p>
 . Open the properties window for the website. You can do this by right clicking on the Default Website and selecting Properties from the menu.

API:CreateSSLCert - Revision history

WikiAdmin at 18:37, 26 March 2014

WikiAdmin at 18:33, 26 March 2014

WikiAdmin at 18:33, 26 March 2014

188.107.134.155 at 07:56, 5 September 2012

WikiAdmin at 08:13, 4 September 2012

WikiAdmin at 08:05, 4 September 2012

WikiAdmin at 08:04, 4 September 2012

188.107.134.155: Created page with "{{Sidebar}} __NOTOC__

Creating a SSL certificate

188.107.134.155: Created page with "{{Sidebar}} NOTOC