SSL certificate expiries: Difference between revisions

From GigaTux Wiki
Jump to navigation Jump to search
Line 9: Line 9:
** /var/lib/dtc/etc/ssl/new.cert.cert
** /var/lib/dtc/etc/ssl/new.cert.cert
** /var/lib/dtc/etc/ssl/new.cert.key
** /var/lib/dtc/etc/ssl/new.cert.key
** /var/lib/dtc/etc/ssl/new.ca.cert
** /var/lib/dtc/etc/ssl/new.cert.ca
** /var/lib/puppet/ssl/certs/cert.crt
** /var/lib/puppet/ssl/certs/cert.crt
** /var/lib/puppet/ssl/certs/cert.key
** /var/lib/puppet/ssl/certs/cert.key

Revision as of 21:39, 7 April 2017

When the SSL certificates expire, buy new ones and install them as follows:

*.gigatux.com

  • Cassandra:
    • /var/www/sites/cocodude/gigatux.com/subdomains/www/ssl/www.gigatux.com.cert.cert
    • /var/www/sites/cocodude/gigatux.com/subdomains/www/ssl/www.gigatux.com.cert.key
    • /var/www/sites/cocodude/gigatux.com/subdomains/www/ssl/www.gigatux.com.cert.ca
    • /var/lib/dtc/etc/ssl/new.cert.cert
    • /var/lib/dtc/etc/ssl/new.cert.key
    • /var/lib/dtc/etc/ssl/new.cert.ca
    • /var/lib/puppet/ssl/certs/cert.crt
    • /var/lib/puppet/ssl/certs/cert.key
    • /var/lib/puppet/ssl/certs/cert.ca
  • Cassandra and Psiren:
    • /etc/ssl/private/gigatux-wildcard-2017.pem
    • /etc/ssl/private/gigatux-wildcard-2017.key
  • Billing site
  • All cPanel services
  • HyperVM
  • Ports: 995, 993, 143, 21, 110, 8140

Configuration files that might need updating:

  • /etc/dovecot/conf.d/10-ssl.conf
  • /etc/postfix/main.cf

*.vixile.com

  • Main website

*.vixile.net

  • All cPanel DNS services:
    • ns2.vixile.net
    • ns3.vixile.net

*.babblerabble.com

  • Jabber
  • Web site