/ Zope / Apsis / Pound Mailing List / Archive / 2007 / 2007-09 / How can pound handle the new certs with local CA?

[ << ] [ >> ]

[ Multiple HeadRequire in one service / "Nigel ... ] [ Re: [Pound Mailing List] HTTPS for multiple ... ]

How can pound handle the new certs with local CA?
lists <lists(at)loadbalancer.org>
2007-09-27 15:02:44 [ FULL ]
Verisign has change all of their certs to come with a local CA i.e.:
http://www.verisign.com/support/verisign-intermediate-ca/trial-secure-server-intermediate/index.html

How do I install this to work with pound?

Thanks very much in advance.

Regards,
Malcolm.

Re: [Pound Mailing List] How can pound handle the new certs with local CA?
Dave Steinberg <dave(at)redterror.net>
2007-09-27 15:56:13 [ FULL ]
lists wrote:[...]

# cat server.key server.crt intermediate.crt > server.pem

In your pound.conf:

...
Cert /path/to/server.pem

That's it.  If pound complains about the cert, switch the server.crt and 
intermediate.crt.  I always have to try it and test it to make sure I've 
got it right.  :)

Regards,[...]

Re: [Pound Mailing List] How can pound handle the new certs with local CA?
lists <lists(at)loadbalancer.org>
2007-09-27 18:23:46 [ FULL ]
Dave,

Doh... that was easy thanks...


Dave Steinberg wrote:[...][...][...]

MailBoxer