# openssl x509 -in /etc/ssl/certs/star-cc-server.crt -signkey /etc/pki/tls/private/star-cc-server.key -x509toreq -out star-cc-server.csr
# cat star-cc-server.csr
Certificate Request:
Data:
Version: 0 (0x0)
Subject: OU=Domain Control Validated, OU=COMODO SSL Wildcard, CN=*.cc.binghamton.edu
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b4:ba:b4:87:ac:b2:6c:a2:40:76:07:01:69:e0:
52:d4:d1:2f:24:31:c6:fd:b4:a9:b1:33:58:98:d8:
2b:29:78:fd:cc:92:e3:df:62:2c:a9:1f:e5:94:fb:
f4:2a:27:b9:be:70:e2:44:3c:f6:90:c1:50:40:13:
aa:5a:40:be:1c:af:51:91:25:46:79:5b:cc:15:31:
97:c6:34:d0:d4:5d:75:ed:a6:65:77:7d:40:47:74:
f1:51:8f:01:00:46:15:0e:35:46:66:1c:88:e5:d9:
c8:c7:41:6a:cf:9f:be:0e:9a:e2:20:92:b7:bf:d7:
00:8e:fb:2e:9f:42:ac:25:b7:e9:b6:64:e3:a4:75:
02:f1:cc:be:b4:81:4e:51:80:66:df:c7:3f:8e:23:
62:8e:0e:06:2d:08:8e:bb:97:1d:b4:bd:37:bd:b1:
12:9d:ae:72:d9:79:7a:8c:6b:d2:8a:d8:11:8f:64:
78:41:86:48:0b:89:47:e2:44:52:04:9c:12:7d:16:
24:44:00:d4:ca:97:9f:4d:19:06:f7:43:ee:c1:2f:
01:53:6c:8f:2b:bb:36:7e:52:22:e3:84:64:79:98:
84:df:e7:d6:c8:ba:52:db:53:b9:5b:bf:59:68:66:
36:90:67:05:58:12:18:54:46:90:56:96:53:06:86:
15:6d
Exponent: 65537 (0x10001)
Attributes:
a0:00
Signature Algorithm: sha256WithRSAEncryption
a1:b4:1d:ca:48:af:bf:32:ea:d9:06:68:b0:3b:60:35:ca:bd:
ba:ca:78:e9:35:37:19:9d:4d:82:08:03:8a:0e:5d:b6:ae:04:
a9:e7:65:26:dd:06:c5:a0:c3:5d:3e:07:c9:7b:16:b8:6d:01:
47:8b:b5:3d:79:82:11:c9:28:f2:bd:60:78:f1:7c:ba:0a:36:
ac:38:6a:28:14:d8:9a:e8:2f:39:c2:96:0a:57:cd:32:ec:81:
78:d9:68:33:6a:28:ee:25:f3:36:a9:17:1a:27:e5:58:f5:c5:
91:ac:62:1c:61:94:12:90:7d:ac:a4:4c:36:84:21:a6:57:c7:
39:18:fc:65:a6:3d:42:01:d2:05:77:56:b3:7c:ec:92:97:e6:
69:3c:5a:c4:ea:9e:24:91:ee:f7:ce:d5:0a:c0:f4:c5:76:10:
bd:87:0b:c8:d4:38:cd:2b:1b:e0:fe:62:64:a4:db:c5:dc:40:
a8:6f:3e:55:d9:96:39:0d:19:a2:57:6d:9f:b0:50:e9:3a:d2:
99:f1:9e:3d:ee:c4:94:d4:d5:ff:cb:56:76:d5:e1:e2:ef:94:
36:a5:aa:35:a9:57:35:7f:7d:1f:ac:47:88:e2:8a:95:00:0f:
22:25:f0:3d:89:63:65:b6:c5:b8:e2:09:f8:ca:19:32:7a:98:
2c:93:dc:92
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
ansible all -m raw -a "hostname;ls -ltr /etc/ssl/certs/*.crt |egrep -i star ; ls -ltr /etc/pki/tls/private/*.key |egrep -i star"
--- Comodo/Sectigo ---
Comodo/Sectigo
grep -i -r 'SSLCertificateFile' /etc/httpd/
Where '/etc/httpd/' is the base directory for your Apache installation.
Identify the SSL block to configure.
Below is a very simple example of a virtual host configured for SSL. The parts listed in bold are the parts that must be added for SSL configuration:
DocumentRoot /var/www/html2
ServerName www.yourdomain.com
SSLEngine on
SSLCertificateFile /path/to/your_domain_name.crt
SSLCertificateKeyFile /path/to/your_private.key
SSLCertificateChainFile /path/to/SectigoCA.crt
Adjust the file names to match your certificate files:
SSLCertificateFile should be your Sectigo certificate file (eg. your_domain_name.crt).
SSLCertificateKeyFile should be the key file generated when you created the CSR.
SSLCertificateChainFile should be the Sectigo intermediate certificate file (SectigoRSACA.crt)
