Hi
Thanks for this.
Yes there is information in the email sent with the certificate. Sadly I
think it is the email that was responsible for confusing me as it
included instructions for installing on Microsoft IIS even though I
requested an Apache certificate! When you don't know what you are doing
to start with and then get info for something else, well it doesn't help
:)
Many thanks
Heather Peake
VLE Development Co-ordinator
Tel 01623 627191 ext 2292
-----Original Message-----
From: Discussion list for Shibboleth developments
[mailto:[log in to unmask]] On Behalf Of Andy Swiffin
Sent: 12 March 2008 10:23
To: [log in to unmask]
Subject: Re: What happens if you get your SSL Certificate wrong
>>> On 12/03/2008 at 09:28, in message
<[log in to unmask]>, Heather Peake
<[log in to unmask]> wrote:
> Hello
> I've got an SSL certificate and I'm worried that it isn't the right
kind,
> mainly because the file extension that it has is .pem
> If I go ahead and use it and register my IDP on the UK Federation with
it
> what happens if it is the wrong kind of certificate?
> Will I bring everything to it's knees? Will I get some sort of warning
> message? Will I just fail to be able to access anything and be sat
> scratching my head as to what could be wrong?
Ignore the scare stories - it's all very simple. If I can get it
working first time it must be!
Here's a snippet from my idp.xml:
<FileResolver Id="ukfederationCred">
<Key>
<Path>file:/usr/local/apache2/conf/idp1.key</Path>
</Key>
<Certificate>
<Path>file:/usr/local/apache2/conf/idp1.pem</Path>
<CAPath>file:/usr/local/apache2/conf/sureserverEDU.crt</CAPath>
</Certificate>
</FileResolver>
Don't worry about the fact its called a pem - like Ian says they just
don't seem able to make up their minds as to what extension to use.
You do need the key as well of course. And you need to download
sureserverEDU.crt (it's a JANET SCS cert isn't it?) to add that to make
the chain. There will have been a link to that in the email you
received if I remember rightly.
Cheers
Andy
--
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
This e-mail and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom
they are addressed.
If you have received this e-mail in error please notify the
originator of the message. This footer also confirms that this
e-mail message has been scanned for the presence of computer viruses.
Any views expressed in this message are those of the individual
sender, except where the sender specifies and with authority,
states them to be the views of West Nottinghamshire College.
Scanning of this message and addition of this footer is performed
by SurfControl E-mail Filter software in conjunction with
virus detection software.
West Nottinghamshire College
Derby Road
Mansfield
Nottinghamshire
NG18 5BH
Tel: 01623 627191
URL: http://www.wnc.ac.uk
VAT No: 593 475 93
|