Support

Installing a SSL Certificate on Apache Mod_nns

To install the SSL Certificate on a correct way you must first install the Intermediate Certificates. These depends on the chosen product. In our example we use a Networking4all Regular Basic SSL Certificate.

Step 1

Adding the Intermediate Certificates can be done by using two commands. Both do not give any response if the act is properly implemented.

# certutil -A -n "GeoTrustGlobalCA" -t "CT,," -d /here/your/path/ -a -i GeoTrustGlobalCA.cer
# certutil -A -n "RapidSSLCA.cer" -t "CT,," -d /here/your/path/ -a -i RapidSSLCA.cer

Step 2

Thereafter, you should add the SSL Certificate to the certificate database by using the following command:

# certutil -A -n "www-hereyourname-com.cer" -t "P,," -d /here/your/path/ -a -i www-hereyourname-com.cer

Step 3

With this command you can verify whether all certificates are added:

# certutil -L -d /here/your/path/

Certificate Nickname                                         Trust AttributesSSL,S/MIME,JAR/XPI
GeoTrustGlobalCA                                             CT,,
www-hereyourname-com.cer                                     Pu,u,u
RapidSSLCA.cer                                               CT,,

Step 4

Finally, you can use this command to check the certificate by yourself:

# certutil -L -d /here/your/path/ -n "www-hereyourname-com.cer"

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94698 (0x171ea)
        Signature Algorithm: PKCS #1 SHA-1 With RSA Encryption
        Issuer: "CN=RapidSSL CA,O="GeoTrust, Inc.",C=US"
        Validity:
            Not Before: Wed Apr 20 07:33:50 2011
            Not After : Thu Jan 26 01:15:38 2012       
Subject: "CN=www.hereyourname.com,OU=Domain Control Validated - Rapid           
     SSL(R),OU=See www.rapidssl.com/resources/cps (c)11,OU=GT55811574,
O=www.hereyourname.com,C=NL,serialNumber=xz8Afyqq/ajqPeaLgxrL9Es3           
            shySv9qT"