I have included a new SSL Certificate Reference Appendix in the book. It needs to be checked by QE.
http://documentation-devel.engineering.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/2/html-single/Messaging_Installation_and_Configuration_Guide/index.html#appe-OpenSSL_Certificate_Reference
The content in Appendix B seems to be correct, I have only few comments: 1.) B.1. Reference of Certificates The link to www.openssl.org points to a not valid location: /docs/en-US/Red_Hat_Enterprise_MRG/2/html-single/Messaging_Installation_and_Configuration_Guide/www.openssl.org use http:// in the link 3.) "Create Your Own Certificate Authority" paragraph: step 2.: - d. Create a file containing an initial serial number (for example, 1) at /etc/pki/CA/serial. + d. Create a file containing an initial serial number (for example, 01) at /etc/pki/CA/serial. (the serial number is in HEX format, ie. the count of digits in the number given must be even) 2.) "Create Your Own Certificate Authority" paragraph: The default set-up is valid for rhel6, on rhel5 two more actions needs to be done: step 2.: + e.) Create the directory where new certificates will be stored: /etc/pki/CA/newcerts (RHEL5 only) step 3.: User must enter the following directory before the command execution: (in rhel6 the command can be executed from arbitrary location, so execution from /etc/pki/tls/cert works as well, therefore I suggest to just add the line and do not distinguish between rhel versions here) + cd /etc/pki/tls/cert (needed RHEL5 only) # openssl ca -notext -out mynewcert.pem -infiles myreq.pem
http://documentation-devel.engineering.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Messaging_Installation_and_Configuration_Guide/appe-OpenSSL_Certificate_Reference.html
Hi Joshua, changes are OK, but I made a copy&paste failure in the previous command, my apologise for that: - cd /etc/pki/tls/cert + cd /etc/pki/tls/certs -- I have also noticed that you added both the new steps to "step 2." of "Create Your Own Certificate Authority" paragraph (that's ok), because both are related only to rhel5 I suggest the following improvement: - e. RHEL 5 Only: Create the directory where new certificates will be stored: /etc/pki/CA/newcerts - f. Change to the certificate directory: cd /etc/pki/tls/certs. - e. On RHEL 5 two additional steps must be node: Create the directory where new certificates will be stored: /etc/pki/CA/newcerts Change to the certificate directory: cd /etc/pki/tls/certs. But that's only a suggestion you don't need to apply this change.
(In reply to comment #4) correction: of course I meant plus sign here: > - e. On RHEL 5 two additional steps must be node: + e. On RHEL 5 two additional steps must be node:
Content approved. Version used for verification: Messaging Installation and Configuration Guide (Revision 1.0.0-51) -> VERIFIED
Docs published on https://access.redhat.com/knowledge/docs/Red_Hat_Enterprise_MRG/