|
@@ -2648,6 +2648,15 @@ openssl req \
|
2648
|
2648
|
-out /etc/ssl/certs/$HOSTNAME.crt
|
2649
|
2649
|
chmod 400 /etc/ssl/private/$HOSTNAME.key
|
2650
|
2650
|
/etc/init.d/nginx reload
|
|
2651
|
+
|
|
2652
|
+# add the public certificate to a separate directory
|
|
2653
|
+# so that we can redistribute it easily
|
|
2654
|
+if [ ! -d /etc/ssl/mycerts ]; then
|
|
2655
|
+ mkdir /etc/ssl/mycerts
|
|
2656
|
+fi
|
|
2657
|
+cp /etc/ssl/certs/$HOSTNAME.crt /etc/ssl/mycerts
|
|
2658
|
+# Create a bundle of your certificates
|
|
2659
|
+cat /etc/ssl/mycerts/*.crt > /etc/ssl/freedombone-bundle.crt
|
2651
|
2660
|
#+END_SRC
|
2652
|
2661
|
|
2653
|
2662
|
Save and exit.
|
|
@@ -8237,6 +8246,14 @@ Create a bundled certificate which joins the certificate and chain file together
|
8237
|
8246
|
cat /etc/ssl/certs/$HOSTNAME.crt /etc/ssl/chains/startssl-sub.class1.server.ca.pem > /etc/ssl/certs/$HOSTNAME.bundle.crt
|
8238
|
8247
|
#+END_SRC
|
8239
|
8248
|
|
|
8249
|
+And also add it to the overall bundle of certificates for the BBB. This will allow you to easily install the certificates onto other systems.
|
|
8250
|
+
|
|
8251
|
+#+BEGIN_SRC: bash
|
|
8252
|
+mkdir /etc/ssl/mycerts
|
|
8253
|
+cp /etc/ssl/certs/$HOSTNAME.bundle.crt /etc/ssl/mycerts
|
|
8254
|
+cat /etc/ssl/mycerts/*.crt > /etc/ssl/freedombone-bundle.crt
|
|
8255
|
+#+END_SRC
|
|
8256
|
+
|
8240
|
8257
|
Edit your configuration file.
|
8241
|
8258
|
|
8242
|
8259
|
#+BEGIN_SRC: bash
|