-
Notifications
You must be signed in to change notification settings - Fork 0
PFX extract certification
Extract crt encrypted: openssl pkcs12 -in STAR_DOMAIN_com.pfx -clcerts -nokeys -out STAR_DOMAIN_encrypted.crt
STAR_DOMAIN_encrypted.crt -> in dumocom is privateKey.crt
Extract key encrypted: openssl pkcs12 -in STAR_DOMAIN_com.pfx -nocerts -out STAR_DOMAIN_encrypted.key
STAR_DOMAIN_encrypted.key -> iin dumocom is encryptedprivate.key (not used)
Change from simple key in pem key: openssl rsa -in STAR_DOMAIN_encrypted.key -outform PEM -out STAR_DOMAIN_encrypted_pem.key
STAR_DOMAIN_encrypted_pem.key -> in dumocom is private.key
Extract pem: openssl pkcs12 -in STAR_DOMAIN_com.pfx -cacerts -nokeys -out STAR_DOMAIN_cabundle.pem
STAR_DOMAIN_cabundle.pem -> in dumocom is private.ca.crt
Use this 3 files: STAR_DOMAIN_cabundle.pem STAR_DOMAIN_encrypted_pem.key STAR_DOMAIN_encrypted.crt
(privateKey.crt private.key private.ca.crt)
What I did last time : go to samsa-stack -> dumocom-prod samsa-stack/docker/ssl there change the files that are used (privateKey.crt private.key private.ca.crt) with anotjer name (use mv private.key oldprivate.key) then take the new pfx file that you will get from andre or from support and get also the password , could be the same as before , you have it in the file with password for connection to dumocom server , then use the steps that are on top of this wiki , you can use them local then move to server or move this pfx to server , to get it on windows move it true email then to put it on linux use scp D:/TxtFile.txt root@ipaddress:/home/usr/ then go on linux server and use the commands to create the 3 files , move them in /docker/ssl . then you need to restart docker ... if its still not working check the old key,crt,ca.crt files to look the same as the new one , then in /var/log/apache2 you have logs . if docker is broken reebot server , if still not working stop the backend container (!!!not the db one !!!) while you do that put the files on git and change the version then sudo docker system prune and remake the container , sudo make start .
tes