Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The process for updating the SELV certificate is straight-forward yet tedious.

Below is the contents of the readme.txt notes created when it was updated last:

This SSL configuration is setup for the gandi.net certification provider.

The certificate is a SHA2 certificate which needs a chain file created that
contains both the intermediate certificate and the cross-signed
certificate into a single bundle stored in a PEM file.

The file villagereach-chain.pem is simply the GandiStandardSSLCA2.pem
concatinated with the USERTrustRSAAddTrustCA.pem file. NOTE: These
two files are this directory, but only for reference. Their contents
are duplicated in the villagereach-chain.pem file.

Then, in the Apache configuration file, you must use the
SSLCertificateChainFile directive to specify the chain file.

See: http://wiki.gandi.net/en/ssl/intermediate#sha2_intermediate_certificates

SELV's SSL configuration parallels that of SIIL's. Please see this page for details.