beautypg.com

Using an existing key/ certificate, Exporting a key/certificate from a server, Apache interface to open ssl* (mod_ssl) – HP e-CommerceXML Accelerator sa7150 User Manual

Page 47

background image

C H A P T E R 3

SSL Operations

37

-----BEGIN CERTIFICATE-----

MIIDKDCCAtKgAwIBAgIBADANBgkqhkiG9w0BAQQFADCB

nDELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMQ4wDAYD

VQQHEwVQb3dheTEaMBgGA1UEChMRQ29tbWVyY2Ug

.

.

.

-----END CERTIFICATE-----

...

Import successful!

HP SA7150>

5. Create mapping for Server 1. Use the create map command to

specify the server IP address, ports, and keyID.

HP SA7150> create map

Server IP (0.0.0.0): 10.1.1.30

Network port [443]:

Cleartext (server) port [80]:

KeyID to use for mapping: mywebserver

6. Save the configuration when the server has been mapped.

HP SA7150> config save

Saving configuration to flash...

Configuration saved to flash

HP SA7150>

Using an
Existing Key/
Certificate

Exporting a Key/Certificate from a Server

This method is used when it is important that the existing keys and
certificates are used.

NOTE: Currently there
is no published method
for extracting private
keys from Microsoft* IIS
or Netscape* servers.

Consult your server software documentation for detailed instructions
on how to export keys and certificates. Once you have exported the
keys and certificates, use the import key and import cert commands
to paste the keys and certificates into your SA7150. Some general
instructions are provided below for the Apache Web Server.

Apache Interface to Open SSL* (mod_ssl)

For key:

1. Look in $APACHEROOT/conf/httpd.conf for location of *.key

file.

2. Copy and paste the key file.