...
The CA will use your public key in the CSR to sign and return back your server certificate.
| Warning |
|---|
Provide a link to explain the CA signing process. |
...
| Warning |
|---|
This next section needs to be moved out into a sub page. |
Download CA Certificates
You may also need the CA's certificates which can be downloaded from StartSSL,
| Panel |
|---|
Toolbox, StartCom CA Certificates: Download "StartCom Root CA (PEM encoded)" |
It is recommend to change the ca.pem file to include the CA's brand or name, such as, StartSSL_Root_CA.pem.
However, you will want to check if the file already exists and managed by the operating system. In the case of Ubuntu, look in /etc/ssl/certs.
| Code Block | ||
|---|---|---|
| ||
diff StartSSL_Root_CA.pem /etc/ssl/certs/StartCom_Certification_Authority.pem |
As seen above, since no data is returned from the diff command the files match exactly.
Download Intermediate Certificates
In some cases you may also need the intermediate certificates.
| Panel |
|---|
Toolbox, StartCom CA Certificates: Download "Class 1 Intermediate Server CA" |
Change the default sub.class1.server.ca.pem file to include the CA's brand or name such as, StartSSL_Sub_Class1_CA.pem.
However, you will want to check if the file already exists and managed by the operating system. In the case of Ubuntu, look in /etc/ssl/certs.
| Code Block | ||
|---|---|---|
| ||
diff StartSSL_Sub_Class1_CA.pem /etc/ssl/certs/StartSSL_Sub_Class1_CA.pem |
As seen above, since no data is returned from the diff command the files match exactly.
Store Certificates in Protect Area
...