Bug 910009

http://documentation-devel.engineering.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/2/html-single/Messaging_Installation_and_Configuration_Guide/index.html#appe-OpenSSL_Certificate_Reference

The content in Appendix B seems to be correct, I have only few comments:

1.) B.1. Reference of Certificates

The link to www.openssl.org points to a not valid location:
/docs/en-US/Red_Hat_Enterprise_MRG/2/html-single/Messaging_Installation_and_Configuration_Guide/www.openssl.org

use http:// in the link

3.) "Create Your Own Certificate Authority" paragraph:

step 2.:
- d. Create a file containing an initial serial number (for example, 1) at /etc/pki/CA/serial. 
+ d. Create a file containing an initial serial number (for example, 01) at /etc/pki/CA/serial. 

(the serial number is in HEX format, ie. the count of digits in the number given must be even)

2.) "Create Your Own Certificate Authority" paragraph:
The default set-up is valid for rhel6, on rhel5 two more actions needs to be done:

step 2.:
+ e.) Create the directory where new certificates will be stored: /etc/pki/CA/newcerts (RHEL5 only)

step 3.: User must enter the following directory before the command execution:
(in rhel6 the command can be executed from arbitrary location, so execution from /etc/pki/tls/cert works as well, therefore I suggest to just add the line and do not distinguish between rhel versions here)

+ cd /etc/pki/tls/cert (needed RHEL5 only)
# openssl ca -notext -out mynewcert.pem -infiles myreq.pem

http://documentation-devel.engineering.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Messaging_Installation_and_Configuration_Guide/appe-OpenSSL_Certificate_Reference.html

Hi Joshua, changes are OK, but I made a copy&paste failure in the previous command, my apologise for that:

- cd /etc/pki/tls/cert
+ cd /etc/pki/tls/certs

--

I have also noticed that you added both the new steps to "step 2." of "Create Your Own Certificate Authority" paragraph (that's ok), because both are related only to rhel5 I suggest the following improvement:

- e. RHEL 5 Only: Create the directory where new certificates will be stored: /etc/pki/CA/newcerts
- f. Change to the certificate directory: cd /etc/pki/tls/certs. 

- e. On RHEL 5 two additional steps must be node: 
    Create the directory where new certificates will be stored: /etc/pki/CA/newcerts
    Change to the certificate directory: cd /etc/pki/tls/certs. 

But that's only a suggestion you don't need to apply this change.

(In reply to comment #4) 
correction: of course I meant plus sign here:
> - e. On RHEL 5 two additional steps must be node: 
+ e. On RHEL 5 two additional steps must be node:

http://documentation-devel.engineering.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Messaging_Installation_and_Configuration_Guide/appe-OpenSSL_Certificate_Reference.html

Content approved.

Version used for verification:
Messaging Installation and Configuration Guide (Revision 1.0.0-51)

-> VERIFIED

Docs published on https://access.redhat.com/knowledge/docs/Red_Hat_Enterprise_MRG/