Self-Signed SSL Certificate / Certbot - Revision history

Jgutierrez6: /* How To Get a UCSF SSL Cert and Replace LetsEncrypt Certs */

2025-01-14T20:22:24Z

How To Get a UCSF SSL Cert and Replace LetsEncrypt Certs

← Older revision		Revision as of 20:22, 14 January 2025
Line 17:		Line 17:

	== How To Get a UCSF SSL Cert and Replace LetsEncrypt Certs ==		== How To Get a UCSF SSL Cert and Replace LetsEncrypt Certs ==
			# Create a CSR (Certificate Signing Request)
			#: <source>openssl req -new -newkey rsa:2048 -nodes -out servername.csr -keyout servername.key</source>
	# File a SSL Ticket Request with UCSF IT [https://ucsf.service-now.com/ucsfit?id=ucsf_sc_cat_item&sys_id=cac85acc3999d1406052ed799408d656&sysparm_category=c76baa05a5d51100e2dca212349e2286 here].		# File a SSL Ticket Request with UCSF IT [https://ucsf.service-now.com/ucsfit?id=ucsf_sc_cat_item&sys_id=cac85acc3999d1406052ed799408d656&sysparm_category=c76baa05a5d51100e2dca212349e2286 here].
	~~#* Create a CSR~~
	~~#: <source>openssl req -new -newkey rsa:2048 -nodes -out servername.csr -keyout servername.key</source>~~
	# Create a directory to store the new Certificates		# Create a directory to store the new Certificates
	# Download "Certificate Only" and "Certificate with chain" using wget '<link>' and store in the newly created directory.		# Download "Certificate Only" and "Certificate with chain" using wget '<link>' and store in the newly created directory.

Jgutierrez6 at 03:08, 7 January 2025

2025-01-07T03:08:34Z

← Older revision		Revision as of 03:08, 7 January 2025
Line 30:		Line 30:
	SSLCertificateChainFile <new path>		SSLCertificateChainFile <new path>
	</source>		</source>

			== What Websites in which Machines Need UCSF Certs ==

			Having and renewing these UCSF Certs for these specific websites keeps UCSF IT satisfied enough to not bother us. At some point, they will ask to replace all our website certificates. When that happens you can request for a Wildcard SSL Cert. As to how that cert gets implemented into Apache, I don't know.

			{\| class="wikitable"
			\|-
			! Website !! Machine
			\|-
			\| irwinlab1.ucsf.edu \|\| files2
			\|-
			\| irwinlab2.ucsf.edu \|\| epyc
			\|-
			\| vav.compbio.ucsf.edu \|\| vav
			\|-
			\|}

Jgutierrez6: /* How To Get a UCSF SSL Cert and Replace LetsEncrypt Certs */

2025-01-07T02:38:48Z

How To Get a UCSF SSL Cert and Replace LetsEncrypt Certs

← Older revision		Revision as of 02:38, 7 January 2025
Line 23:		Line 23:
	# Download "Certificate Only" and "Certificate with chain" using wget '<link>' and store in the newly created directory.		# Download "Certificate Only" and "Certificate with chain" using wget '<link>' and store in the newly created directory.
	# Remove Let’s Encrypt Cert if it exists		# Remove Let’s Encrypt Cert if it exists
	#*<source>certbot delete --cert-name domain.com</source>		#:<source>certbot delete --cert-name domain.com</source>
	#Go to the /etc/httpd/conf.d/<name>-le-ssl.conf of the site and at the bottom replace these with the path of where you put the Certificate		#Go to the /etc/httpd/conf.d/<name>-le-ssl.conf of the site and at the bottom replace these with the path of where you put the Certificate
	#:<source>		#:<source>

Jgutierrez6: /* How To Get a UCSF SSL Cert and Replace LetsEncrypt Certs */

2025-01-07T02:38:40Z

How To Get a UCSF SSL Cert and Replace LetsEncrypt Certs

← Older revision		Revision as of 02:38, 7 January 2025
Line 25:		Line 25:
	#*<source>certbot delete --cert-name domain.com</source>		#*<source>certbot delete --cert-name domain.com</source>
	#Go to the /etc/httpd/conf.d/<name>-le-ssl.conf of the site and at the bottom replace these with the path of where you put the Certificate		#Go to the /etc/httpd/conf.d/<name>-le-ssl.conf of the site and at the bottom replace these with the path of where you put the Certificate
	<source>		#:<source>
	SSLCertificateFile <new path>		SSLCertificateFile <new path>
	SSLCertificateKeyFile <new path>		SSLCertificateKeyFile <new path>
	SSLCertificateChainFile <new path>		SSLCertificateChainFile <new path>
	</source>		</source>

Jgutierrez6: /* How To Get a UCSF SSL Cert and Replace LetsEncrypt Certs */

2025-01-07T02:38:28Z

How To Get a UCSF SSL Cert and Replace LetsEncrypt Certs

← Older revision		Revision as of 02:38, 7 January 2025
Line 20:		Line 20:
	#* Create a CSR		#* Create a CSR
	#: <source>openssl req -new -newkey rsa:2048 -nodes -out servername.csr -keyout servername.key</source>		#: <source>openssl req -new -newkey rsa:2048 -nodes -out servername.csr -keyout servername.key</source>
	# Create a directory to store the ~~Certificate~~		# Create a directory to store the new Certificates
	# Download ~~their Certificates~~ using wget '<link>' and store in ~~that~~ directory		# Download "Certificate Only" and "Certificate with chain" using wget '<link>' and store in the newly created directory.
	# Remove Let’s Encrypt Cert if it exists		# Remove Let’s Encrypt Cert if it exists
	#*<source>certbot delete --cert-name domain.com</source>		#*<source>certbot delete --cert-name domain.com</source>

Jgutierrez6: /* How To Add UCSF IT SSL Cert */

2025-01-07T02:32:24Z

How To Add UCSF IT SSL Cert

← Older revision		Revision as of 02:32, 7 January 2025
Line 16:		Line 16:
	#*certbot delete --cert-name sample.docking.org		#*certbot delete --cert-name sample.docking.org

	== How To ~~Add~~ UCSF IT SSL Cert ==		== How To Get a UCSF SSL Cert and Replace LetsEncrypt Certs ==
	#File an SSL Ticket Request with UCSF IT [https://ucsf.service-now.com/ucsfit?id=ucsf_sc_cat_item&sys_id=cac85acc3999d1406052ed799408d656&sysparm_category=c76baa05a5d51100e2dca212349e2286 here].		# File a SSL Ticket Request with UCSF IT [https://ucsf.service-now.com/ucsfit?id=ucsf_sc_cat_item&sys_id=cac85acc3999d1406052ed799408d656&sysparm_category=c76baa05a5d51100e2dca212349e2286 here].
	#Download their Certificates using wget '<link>'		#* Create a CSR
	#Remove Let’s Encrypt Cert		#: <source>openssl req -new -newkey rsa:2048 -nodes -out servername.csr -keyout servername.key</source>
			# Create a directory to store the Certificate
			# Download their Certificates using wget '<link>' and store in that directory
			# Remove Let’s Encrypt Cert if it exists
	#*<source>certbot delete --cert-name domain.com</source>		#*<source>certbot delete --cert-name domain.com</source>
	~~#*<source>openssl req -new -newkey rsa:2048 -nodes -out servername.csr -keyout servername.key</source>~~		#Go to the /etc/httpd/conf.d/<name>-le-ssl.conf of the site and at the bottom replace these with the path of where you put the Certificate
	~~#Create a directory to store the Certificate~~
	#Go to the <name>-le-ssl.conf of the site and at the bottom replace these with the path of where you put the Certificate
	<source>		<source>
	SSLCertificateFile <new path>		SSLCertificateFile <new path>

Jgutierrez6: /* How To Add UCSF IT SSL Cert */

2025-01-07T02:24:19Z

How To Add UCSF IT SSL Cert

← Older revision		Revision as of 02:24, 7 January 2025
Line 17:		Line 17:

	== How To Add UCSF IT SSL Cert ==		== How To Add UCSF IT SSL Cert ==
	#File an SSL Ticket Request with UCSF IT [https://ucsf.service-now.com/ucsfit?id=~~ucsf_index~~ here].		#File an SSL Ticket Request with UCSF IT [https://ucsf.service-now.com/ucsfit?id=ucsf_sc_cat_item&sys_id=cac85acc3999d1406052ed799408d656&sysparm_category=c76baa05a5d51100e2dca212349e2286 here].
	#Download their Certificates using wget '<link>'		#Download their Certificates using wget '<link>'
	#Remove Let’s Encrypt Cert		#Remove Let’s Encrypt Cert

Jgutierrez6: /* How To Add UCSF IT SSL Cert */

2025-01-07T02:23:28Z

How To Add UCSF IT SSL Cert

← Older revision		Revision as of 02:23, 7 January 2025
Line 18:		Line 18:
	== How To Add UCSF IT SSL Cert ==		== How To Add UCSF IT SSL Cert ==
	#File an SSL Ticket Request with UCSF IT [https://ucsf.service-now.com/ucsfit?id=ucsf_index here].		#File an SSL Ticket Request with UCSF IT [https://ucsf.service-now.com/ucsfit?id=ucsf_index here].
	#Download their Certificates ~~and replace them with letsencrypt ones~~		#Download their Certificates using wget '<link>'
	#Remove Let’s Encrypt Cert		#Remove Let’s Encrypt Cert
	#*<source>certbot delete --cert-name domain.com</source>		#*<source>certbot delete --cert-name domain.com</source>

Jgutierrez6: /* How To Add UCSF IT SSL Cert */

2025-01-07T02:19:13Z

How To Add UCSF IT SSL Cert

← Older revision		Revision as of 02:19, 7 January 2025
Line 17:		Line 17:

	== How To Add UCSF IT SSL Cert ==		== How To Add UCSF IT SSL Cert ==
	#File an SSL Ticket Request with UCSF IT		#File an SSL Ticket Request with UCSF IT [https://ucsf.service-now.com/ucsfit?id=ucsf_index here].
	#Download their Certificates and replace them with letsencrypt ones		#Download their Certificates and replace them with letsencrypt ones
	#Remove Let’s Encrypt Cert		#Remove Let’s Encrypt Cert

Jgutierrez6: /* How To Add UCSF IT SSL Cert */

2022-05-11T21:52:38Z

How To Add UCSF IT SSL Cert

← Older revision		Revision as of 21:52, 11 May 2022
Line 27:		Line 27:
	SSLCertificateFile <new path>		SSLCertificateFile <new path>
	SSLCertificateKeyFile <new path>		SSLCertificateKeyFile <new path>
	~~Include <new path>~~
	SSLCertificateChainFile <new path>		SSLCertificateChainFile <new path>
	</source>		</source>