Brocade Virtual ADX Security Guide (Supporting ADX v03.1.00) - Manual (Page 119)

Brocade Virtual ADX Security Guide 107
53-1003250-01
Configuring SSL on a Brocade Virtual ADX
6
12. You can now begin copying the certificates and the key pair files to the Brocade Virtual ADX (in
the following order):
scp ./server-key.pem [email protected]:sslkeypair:server-key:brocade:pem
scp ./server-cert.cer [email protected]:sslcert:certchain1:pem
Unix (Apache)
The following procedure describes the procedure for determining the location of the private key and
certificate files and copying them to a Brocade Virtual ADX.
1. On the Apache server, look in the httpd.config file for the following directives; they point to the
location of the key and certificate files:
SSLCertificateFile .../path/to/mycertfile.crt
SSLCertificateKeyFile .../path/to/mykeyfile.key
NOTE
The default location of the httpd.config file is: /etc/httpd/conf/httpd.conf
2. When you have located the key and certificate files, copy them from the Linux server to the
Brocade Virtual ADX:
scp ./server-key.key [email protected]:sslkeypair:server-key:brocade:pem
scp ./server-cert.crt [email protected]:sslcert:certchain1:pem
scp ./root-cert.crt [email protected]:sslcert:certchain1:pem
Make sure you upload in the same order as the CA hierarchy – only then can the chain be
established properly on the Brocade Virtual ADX.
NOTE
You must upload all of the chain certificates into the same file on the Brocade Virtual ADX.
Bag Attributes:
subject=/DC=org/DC=test/O=root/OU=Security/CN=root
issuer=/DC=org/DC=test/O=root/OU=Security/CN=root
-----BEGIN CERTIFICATE-----
MIIC1TCCAj6gAwIBAgIQJhB5wR9FdbXPEWcLp/1MAjANBgkqhkiG9w0BAQUFADBm
MRMwEQYKCZImiZPyLGQBGRYDb3JnMRgwFgYKCZImiZPyLGQBGRYIam9uZGF2aXMx
EDAOBgNVBAoTB1Rla2VsZWMxETAPBgNVBAsTCFNlY3VyaXR5MRAwDgYDVQQDEwdU
ZWtlbGVjMB4XDTA1MDQxOTAxMTk1OFoXDTA3MDgwNzE3NDM1OFowZjETMBEGCgmS
JomT8ixkARkWA29yZzEYMBYGCgmSJomT8ixkARkWCGpvbmRhdmlzMRAwDgYDVQQK
EwdUZWtlbGVjMREwDwYDVQQLEwhTZWN1cml0eTEQMA4GA1UEAxMHVGVrZWxlYzCB
nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAq36AVcI33Pp9tPjuN2Dx81BIiUTx
ZENHS/0ZL4RREj+BfZG3/J94cE0i5F6l0X9W6jJpUM8sqUVqpounwB6ZeoXHJsQJ
Hvzp1YR77ABS1gR//b9N3TiIXGyb8oaoXdT4xahzfwMTTjOGAGl3xYHC/QdXi3x6
ff+X02AddhIvhaMCAwEAAaOBgzCBgDAMBgNVHRMEBTADAQH/MCAGA1UdJQEB/wQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCAQYwHwYDVR0jBBgw
FoAUVu5XQurF4Y0JQy/kr4y4eHzhucEwHQYDVR0OBBYEFFbuV0LqxeGNCUMv5K+M
uHh84bnBMA0GCSqGSIb3DQEBBQUAA4GBAFCldN7DHtztK2hdiUp1KO1LtO9Ics9g
mjVH869i6qxVOj+YzGfBlz7PvNdW+Nv0TCrrXTLXgZpd1aAW/lTajBfLgFs21Xkf
xSquYFYEcZjz4Uu3gMuuAiS963Xissy+MIyNJpkRP1NpYY75lXAf05sLopzcmdVc
C2es4LOJQbhZ
-----END CERTIFICATE-----