|
@@ -4,7 +4,7 @@
|
4
|
4
|
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
|
5
|
5
|
<head>
|
6
|
6
|
<title></title>
|
7
|
|
-<!-- 2015-03-07 Sat 21:24 -->
|
|
7
|
+<!-- 2015-03-07 Sat 21:53 -->
|
8
|
8
|
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
|
9
|
9
|
<meta name="generator" content="Org-mode" />
|
10
|
10
|
<meta name="author" content="Bob Mottram" />
|
|
@@ -566,6 +566,10 @@ The StartSSL certificates last for a year. You can check the expiry date of your
|
566
|
566
|
</p>
|
567
|
567
|
|
568
|
568
|
<p>
|
|
569
|
+Before changing any certificates it's a good idea to make a backup of the existing system. Plug in a USB drive, log into the Freedombone and become the root user, then run the command <b>backup</b>. Backing up may take a while, but it ensures that if anything goes wrong and you mess up the certificates then there is a way to restore the previous ones.
|
|
570
|
+</p>
|
|
571
|
+
|
|
572
|
+<p>
|
569
|
573
|
Make sure that you have the StartSSL certificate which was created when you initially made an account. You did save it somewhere safe, didn't you? If it's not installed into your browser then in Firefox go to <b>Menu/Preferences/Advanced/View Certificates</b>. Make sure the "<b>Your Cerificates</b>" tab is selected and click "<b>import</b>", then import the StartSSL certificate.
|
570
|
574
|
</p>
|
571
|
575
|
|
|
@@ -694,7 +698,10 @@ To avoid any possibility of the certificates being accidentally overwritten by s
|
694
|
698
|
|
695
|
699
|
<div class="org-src-container">
|
696
|
700
|
|
697
|
|
-<pre class="src src-bash">cp /etc/ssl/certs/$<span class="org-variable-name">HOSTNAME</span>* /etc/ssl/backups/certs/
|
|
701
|
+<pre class="src src-bash">mkdir /etc/ssl/backups
|
|
702
|
+mkdir /etc/ssl/backups/certs
|
|
703
|
+mkdir /etc/ssl/backups/private
|
|
704
|
+cp /etc/ssl/certs/$<span class="org-variable-name">HOSTNAME</span>* /etc/ssl/backups/certs/
|
698
|
705
|
cp /etc/ssl/private/$<span class="org-variable-name">HOSTNAME</span>* /etc/ssl/backups/private/
|
699
|
706
|
chmod -R 400 /etc/ssl/backups/certs/*
|
700
|
707
|
chmod -R 400 /etc/ssl/backups/private/*
|