new DigiCert TLS certificate procedure

This commit is contained in:
2022-03-08 13:39:10 +01:00
parent 6aec414718
commit 4f4fd7e969
+5 -12
View File
@@ -1,7 +1,7 @@
Managing SSL certificates
=========================
We use QuoVadis certificates from Switch.
We use DigiCert certificates.
Requesting certificates
@@ -12,7 +12,7 @@ and ``$ALIASES``::
cat >$FQDN.cnf <<EOF
FQDN = $FQDN
ORGNAME = Paul-Scherrer-Institut (PSI)
ORGNAME = Paul Scherrer Institut (PSI)
# subjectAltName entries: to add DNS aliases to the CSR, delete
# the '#' character in the ALTNAMES line, and change the subsequent
@@ -43,12 +43,9 @@ and ``$ALIASES``::
/usr/bin/openssl req -new -config $FQDN.cnf -keyout $FQDN.key -out $FQDN.csr
Finally, `submit the CSR <https://www.switch.ch/pki/manage/request/>`_.
Finally, `submit the CSR <https://www.digicert.com/secure/requests/products?guest_key=11dqrl7540p3t4jm4qhnvsnzjkvk>`_.
This procedure is described in more detail at the `SWITCH website
<https://www.switch.ch/pki/manage/request/howto/>`_.
SWITCH will send an email including instructions on how to download the
DigiCert will send an email including instructions on how to download the
certificate.
@@ -61,8 +58,4 @@ and submit the CSR as before.
Revoke certificates
-------------------
When receiving the first mail from SWITCH as described in `Requesting
certificates`_ one has to create an account to download the certificate. Using
this account, certificates can be revoked at the `QuoVadis website
<https://tl.quovadisglobal.com/subscriber/>`_.
?