MCNi Wiki : Updating SSL certificate

Created by Stephen Smith on Oct 24, 2018

2018 comment: Justin as in Justin Phelan from Blackwood Media Group, who originally built Bombplates and sold it to MCN in 2011. So, obviously, this is out-of-date.

Get the new certificate (TODO: Justin, please write this part)

For each front end:

Copy the certificate to the server

$ scp CERT.crt ME@FRONTX:~/

Shell into the server and su up

$ ssh ME@FRONTX
$ sudo su

move the file

# mv CERT.crt /etc/pki/tls/certs/

Fix permissions, etc.

# chown root:root /etc/pki/tls/certs/CERT.crt
# chmod 644 /etc/pki/tls/certs/CERT.crt
# restorecon -Rv /etc/pki/tls/certs/CERT.crt

Update Apache

# vim /etc/httpd/conf.d/ssl.conf < SSLCertificateFile /etc/pki/tls/certs/OLDCERT.crt
> SSLCertificateFile /etc/pki/tls/certs/CERT.crt

restart Apache

# /etc/init.d/httpd restart