Re: SSL cert renewal

[Terry Allen <hmag@xxxxxxxxxxxxxx>]

> > > What is the correct procedure for installing the new certificate 
> > > when it is just a renewal? [And, where is this documented?] It's 
> > > the same issuer, same everything. They just emailed a .crt text...
> > > --
> > > Thanks,
> > > -Chris
> > Hi again,
> > 	Name the .crt file to the same name as your current cert, 
> > copy it to the place your current cert resides & reboot the server.
> > 	I'm not sure there is any other way to get your secure stuff 
> > running on the new cert than to reboot.
>
> Well I cut-and-pasted the new cert into the old one, saved it, 
> restarted the server. Now, the cert is "not trusted" in the browser, 
> because it shows that we are the issuer...
>
> Thanks,
> -Chris
Hi again,
        To me, that indicates the either:

1 - The cert is incorrectly formatted (i.e. carriage returns in the 
wrong format owing to cut & paste) - or
2 - The cert has been incorrectly issued & doesn't match your key.

	Try deleting the file, then uploading the .crt file directly 
& rebooting the machine, without doing any cut & paste.
	If this is from a new SSL provider, don't forget you'll need 
to replace the key file as well.
--

	Bye for now, Terry Allen 
	___________________________________________________________________
hEARd

Postal Address:
	hEARd, 26B Glenning Rd,	Glenning Valley, NSW 2261, Australia
Internet -
	WWW: http://heard.com.au http://itavservices.com
EMAIL: hmag@xxxxxxxxxxxxxx
Phone: Australia - 02 4388 1400 / International - + 61 2 43881400
Mobile: Australia - 04 28881400 / International - 61 4 28881400
-----------------------------------------------
Non profit promotion for new music - since 1994
-----------------------------------------------
---------
Tenon Intersystems' iTools Mailing List
To unsubscribe: send mail to 
itools-request@xxxxxxxxxxxxxxx
with the body only containing: 
unsubscribe
Find the searchable mailing list archives 
at:
http://www.tenon.com/lists/html/iTools/