SSL Certificate Instructions Comprehensive Update / Walkthrough

[solderq35]

• I might get an auto-renewal certificate email in early August 2024 (which I will forward over), otherwise, request a new key (see instructions below) after the first week of August ish

Updated Instructions:

• Private key + CSR files (generate in command line via OpenSSL CLI) (.key, .csr)
  • https://osu-sustainability-office.github.io/docs/openssl#requesting-new-certificate (scroll down)
  • Install OpenSSL first (check Unix vs Windows instructions)
  • See Run this command after installing OpenSSL on the Wiki page
• OSU IT InCommon Ticket
  • https://osu-sustainability-office.github.io/docs/openssl#requesting-new-certificate
  • Some fields are outdated, in in doubt just put more details into "Description" input
  • Send .csr file generated from command line (OpenSSL) in previous step
• AWS Certificate Manager Inputs
  • https://osu-sustainability-office.github.io/docs/openssl#uploading-new-certificate
  • AWS Screenshot for Reference
  • "Certificate Body" input field
  • Download the file marked Certificate only, PEM encoded from OSU IT ticket
    • Should be .cer format
  • "Private Key" input field
  • See Run this command after installing OpenSSL on the Wiki page
  • When doing this for real (not practice), make sure that the files you got from OSU IT ticket line up with the .csr and .key files you generated earlier
  • "Certificate Chain" input field
  • Download the file marked Certificate (w/ chain), PEM encoded from OSU IT ticket
    • Should be .pem format

General tip (on wiki page already): Use https://certlogik.com/decoder/ to decode the cert files into plaintext for verification

[solderq35]

Assigning this issue as a reminder to test out the renewal process (well everything except actually sending a new support ticket to OSU IT yet, I guess)

If time, also need to open a PR to potentially clarify the renewal instructions on the wiki page

[s-egge]

34