new DigiCert TLS certificate procedure
This commit is contained in:
@@ -1,7 +1,7 @@
|
||||
Managing SSL certificates
|
||||
=========================
|
||||
|
||||
We use QuoVadis certificates from Switch.
|
||||
We use DigiCert certificates.
|
||||
|
||||
|
||||
Requesting certificates
|
||||
@@ -12,7 +12,7 @@ and ``$ALIASES``::
|
||||
|
||||
cat >$FQDN.cnf <<EOF
|
||||
FQDN = $FQDN
|
||||
ORGNAME = Paul-Scherrer-Institut (PSI)
|
||||
ORGNAME = Paul Scherrer Institut (PSI)
|
||||
|
||||
# subjectAltName entries: to add DNS aliases to the CSR, delete
|
||||
# the '#' character in the ALTNAMES line, and change the subsequent
|
||||
@@ -43,12 +43,9 @@ and ``$ALIASES``::
|
||||
/usr/bin/openssl req -new -config $FQDN.cnf -keyout $FQDN.key -out $FQDN.csr
|
||||
|
||||
|
||||
Finally, `submit the CSR <https://www.switch.ch/pki/manage/request/>`_.
|
||||
Finally, `submit the CSR <https://www.digicert.com/secure/requests/products?guest_key=11dqrl7540p3t4jm4qhnvsnzjkvk>`_.
|
||||
|
||||
This procedure is described in more detail at the `SWITCH website
|
||||
<https://www.switch.ch/pki/manage/request/howto/>`_.
|
||||
|
||||
SWITCH will send an email including instructions on how to download the
|
||||
DigiCert will send an email including instructions on how to download the
|
||||
certificate.
|
||||
|
||||
|
||||
@@ -61,8 +58,4 @@ and submit the CSR as before.
|
||||
|
||||
Revoke certificates
|
||||
-------------------
|
||||
|
||||
When receiving the first mail from SWITCH as described in `Requesting
|
||||
certificates`_ one has to create an account to download the certificate. Using
|
||||
this account, certificates can be revoked at the `QuoVadis website
|
||||
<https://tl.quovadisglobal.com/subscriber/>`_.
|
||||
?
|
||||
|
||||
Reference in New Issue
Block a user