Gandi Wiki


You are on a question's page

Choosing your CSR software
answered

Question "I'm using nginx", by Matt S.

What should I do? (Or if I was using any other kind of server that is not listing, such as thin, etc…)

Answer, by Emerick M. (Gandi)

Hello,

the categories on the Gandi.net control panel are corresponding to the program which will generate the CSR for you.

In most webservers, you can use Apache/ModSSL because you will use OpenSSL to generate the CSR in order to activate the SSL certificate.

This is for the CSR choice on the control panel when you activate the SSL certificate.

Once generated, when you will install it, if the webserver requires that you convert the certificate (originally in CER) to PEM or another format, use OpenSSL converting rules (available in the Gandi SSL wiki).

Report to the webserver documentation to get the directives for creating a SSL virtualhost.

In Cherokee webserver, before using the SSL certificate, you will have to convert the SSL certificate from CER format (.crt) into PEM, then to add the Gandi intermediate certificate after the certificate (like in command line : cat cert.pem GandiStandardSSLCA.pem > newcert.pem)

Regards,

Emerick

Last modified: 22 Aug 2011 at 00:26 by Emerick M. (Gandi)