Re: SSL setup with changed IP address

> When our signed certificate arrived, I placed it (named
> "10.10.10.50.crt") in tenon/ssl/private. I tried turning on security for
> the virtual host and got the error "You must create a 'Certificate'
> before enabling SSLSecurity."

You got this error message because the admin server is looking for a
"10.10.10.50.key" file in the internal WebTen file system.  On your
system, there is only the "10.10.10.10.key". file.

> 
> I used sslcerts.cgi to export the 10.10.10.10 SSL key file, renamed it
> 10.10.10.50.key and added that to the private folder with the .crt, but I
> can't set this path to the key in the SSLCertificateKeyFile field of the
> admin page (whatever I add there gets erased when I save the virtual
> host).
> 
> I tried using sslcerts.cgi to import the renamed key file and the old
> .crt file, but I get a configuration error from the server.

Exporting the key, changing the name, and re-importing the key is a
great idea and it should work.  What kind of configuration error do you
get?  Don't change the "SSLCertificateKeyFile" directive.  It does not
show up in the admin server for security reasons even though it is
changed, but by default points to /etc/ssl/private.  I would recommend
changing the "SSLCertificateKeyFile" back to "/etc/ssl/private".  You
can verify this by looking in the httpd.conf file.

Erik.

-- 
Tenon Technical Support                         support@xxxxxxxxx
1123 Chapala Street Ste 202                     (805) 963-6983
Santa Barbara, CA 93101                         (805) 962-8202 fax
http://www.tenon.com                            ftp://ftp.tenon.com

----
Tenon Intersystems' WebTen Mailing List
To unsubscribe: send mail to webten-request@xxxxxxxxx 
with the subject: unsubscribe
Find searchable Mailing List archives at
http://listsearch.blueworld.com/webtensearch.lasso