Quick Links
Server Types
Installing a Certificate on a Stronghold Server
Note: There are THREE certificates that need to be installed during this process. The first is the "Site" certificate, contained in the email from OptimumSSL. The other two are the Intermediate certificates,
i.e
UTNAddTrustServerCA.crt (this is the first intermediary certificate)
OptimumSSLCA.crt (this is the second intermediary certificate)
yourdomian.crt (this is the certificate for your domain)
Please use the two Intermediate certificates that came with your site certificate UTNAddTrustServerCA.crt & OptimumSSLCA.crt. Please follow the steps below: If you already have a temporary certificate in your /ServerRoot/ssl/certs directory, move, rename or delete it. Run the command "getca servername" where "servername" is the same name created during generation of the key or certificate request ("genkey servername" or "genreq servername"). Open the site certificate in the e-mail from OptimumSSL with a text editor and copy the content (including the lines below), as shown below to your clipboard:
"-----BEGIN CERTIFICATE-----"
and
"-----END CERTIFICATE-----"
Paste the contents into the terminal window where you ran "getca".
Enter Control-D or the appropriate EOF character for your terminal.
Before restarting the server please install the intermediate certificate as below.
Use the UTNAddTrustServerCA.crt certificate provided with your site certificate and copy the certificate content (including the lines below), as shown below to your clipboard. Open a text editor. Paste the information on the clipboard into this text file. Save the file as 'ca_new.txt'. It should look like this:
"-----BEGIN CERTIFICATE-----"
and
"-----END CERTIFICATE-----"
Next, open the second intermediate certificate, OptimumSSLCA.crt. Repeat the process and paste into the same document. Your final doc should look something like this:
-----BEGIN CERTIFICATE-----
MIIEyDCCBDGgAwIBAgIEAgACmzANBgkqhkiG9w0BAQUFADBFQGEwJV
UzEYMBYGA1UEChMPR1RFIENvcnBvcmF0aW9uMRwwGgYDVQUgQ3liZXJU
.....
zs1x+3QCB9xfFScIUwd21LkG6cJ3UB7KybDCRoGAAK1EqlzWINlVqvaDj
vA2AOurM+5pX7XilNj1W6tHndMo0w8+xUengDA==
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIB+jCCAWMCAgGjMA0GCSqGSIb3DQEBBAUAMEUxCzAJMRgwFgYD
VQQKEw9HVEUgQ29ycG9yYXRpb24xHDAaBgNVBAMTEydXN0IFJv
.....
IjeaY8JIILTbcuPI9tl8vrGvU9oUtCG41tWW4/5ODFlitppKqXH/9Apy
bW1EDp3zdHSo1TRJ6V6e6bR64eVaH4QwnNOfpSXY
-----END CERTIFICATE-----
Save the file to the location "ssl/certs/ca_new.txt" located in your ServerRoot directory. Change the SSLCACertificateFile directive in your httpd.conf file to point to the intermediate file (ca_new):
SSLCACertificateFile ssl/certs/ca_new.txt
Now restart the web server so that the new certificate is loaded
