search

dfo-gulf-science / CADI

A placeholder repo for CADI tasks
0 stars 0 forks source link

HTTP / SSL for DM Apps #142

Closed davjfish closed 10 months ago

davjfish commented 1 year ago

Here was the original email:

Image

davjfish commented 1 year ago

Teams meeting on March 2

Image

davjfish commented 1 year ago

Sent a follow up email to Ciaran

stoyelq commented 11 months ago

https://dev.azure.com/foc-poc/Internal%20Developer%20Portal/_wiki/wikis/Internal-Developer-Portal.wiki/3693/SSL-Certificate-Request-New-or-Updated-Intranet-Certificate

stoyelq commented 10 months ago

Assytnet ticket: S1525161, http://assystselfservice.ent.dfo-mpo.ca/assystnet/application.jsp#events/S1525161?eventType=4

Certreq requestID: "104465" private key is on dmapps server: /home/stoyelq/ssl/private.key

The Enterprise Service Desk (ESD) has opened 497895 in response to your request.

stoyelq commented 10 months ago

certs are at dmapps/etc/ssl/certs/dmapps_ssl/ cert id: 104465 Cert valid for two years: Dec 6 18:42:35 2025 GMT

Additional info to the guide on azure:

  1. Generate the request (.csr) + key on server using the san.cnf file, look in /dmapps/stoyelq/ssl/ for files
  2. Copy the .csr file to windows, so that it can be submitted with certreq
  3. Once cert is ready, grab it with certreq in windows and move it to the server
  4. Turn the .cer into a .crt using something like: openssl x509 -inform PEM -in dmapps.cer -out dmapps.crt (optional?)
  5. link to the .crt and the .key in the apache config, redirect http traffic accordingly with something like: 
    <VirtualHost *:80>
ServerName dmapps
Redirect permanent / https://dmapps/
</VirtualHost>
stoyelq commented 10 months ago

Glfscidm002 request ID: 104522