Kaynağa Gözat

Backup before changing certificates

Bob Mottram 10 yıl önce
ebeveyn
işleme
012e2e89d6
2 değiştirilmiş dosya ile 11 ekleme ve 2 silme
  1. 2
    0
      doc/EN/faq.org
  2. 9
    2
      website/EN/faq.html

+ 2
- 0
doc/EN/faq.org Dosyayı Görüntüle

@@ -244,6 +244,8 @@ Now visit your web site at https://mydomainname.com and you should notice that t
244 244
 * How do I renew a StartSSL certificate?
245 245
 The StartSSL certificates last for a year. You can check the expiry date of your current certificate/s by going to your site and if you're using Firefox then click on the *lock icon*, select "*more information*" then "*view certificate*".
246 246
 
247
+Before changing any certificates it's a good idea to make a backup of the existing system. Plug in a USB drive, log into the Freedombone and become the root user, then run the command *backup*. Backing up may take a while, but it ensures that if anything goes wrong and you mess up the certificates then there is a way to restore the previous ones.
248
+
247 249
 Make sure that you have the StartSSL certificate which was created when you initially made an account. You did save it somewhere safe, didn't you? If it's not installed into your browser then in Firefox go to *Menu/Preferences/Advanced/View Certificates*. Make sure the "*Your Cerificates*" tab is selected and click "*import*", then import the StartSSL certificate.
248 250
 
249 251
 Now go to [[startssl.com]] and click on the keys icon on the right hand side to log in. Select the *Control panel* then *Validations Wizard* and choose *Email address validation*. Enter your email address, then wait for the validation email to show up in your inbox. It will contain a code when you can then enter.

+ 9
- 2
website/EN/faq.html Dosyayı Görüntüle

@@ -4,7 +4,7 @@
4 4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
5 5
 <head>
6 6
 <title></title>
7
-<!-- 2015-03-07 Sat 21:24 -->
7
+<!-- 2015-03-07 Sat 21:53 -->
8 8
 <meta  http-equiv="Content-Type" content="text/html;charset=utf-8" />
9 9
 <meta  name="generator" content="Org-mode" />
10 10
 <meta  name="author" content="Bob Mottram" />
@@ -566,6 +566,10 @@ The StartSSL certificates last for a year. You can check the expiry date of your
566 566
 </p>
567 567
 
568 568
 <p>
569
+Before changing any certificates it's a good idea to make a backup of the existing system. Plug in a USB drive, log into the Freedombone and become the root user, then run the command <b>backup</b>. Backing up may take a while, but it ensures that if anything goes wrong and you mess up the certificates then there is a way to restore the previous ones.
570
+</p>
571
+
572
+<p>
569 573
 Make sure that you have the StartSSL certificate which was created when you initially made an account. You did save it somewhere safe, didn't you? If it's not installed into your browser then in Firefox go to <b>Menu/Preferences/Advanced/View Certificates</b>. Make sure the "<b>Your Cerificates</b>" tab is selected and click "<b>import</b>", then import the StartSSL certificate.
570 574
 </p>
571 575
 
@@ -694,7 +698,10 @@ To avoid any possibility of the certificates being accidentally overwritten by s
694 698
 
695 699
 <div class="org-src-container">
696 700
 
697
-<pre class="src src-bash">cp /etc/ssl/certs/$<span class="org-variable-name">HOSTNAME</span>* /etc/ssl/backups/certs/
701
+<pre class="src src-bash">mkdir /etc/ssl/backups
702
+mkdir /etc/ssl/backups/certs
703
+mkdir /etc/ssl/backups/private
704
+cp /etc/ssl/certs/$<span class="org-variable-name">HOSTNAME</span>* /etc/ssl/backups/certs/
698 705
 cp /etc/ssl/private/$<span class="org-variable-name">HOSTNAME</span>* /etc/ssl/backups/private/
699 706
 chmod -R 400 /etc/ssl/backups/certs/*
700 707
 chmod -R 400 /etc/ssl/backups/private/*