3.3. Requesting a Valid SSL Certificate

If you want to use a valid SSL certificate and do not have one for your hostname, it is possible to generate one using the openssl command and a certificate authority. A valid certificate is one that is recognized by all browsers because it was signed by a recognized authority. Those created by Webmin itself, by following the steps in Section 3.2 “SSL Encryption”, do not meet this criteria and will trigger a warning in all browsers when they connect to the Webmin server.

Unfortunately, certificate authorities charge money for signing and verifying that the owner of the server in the hostname actually matches the company details in the certificate. For this reason, most people do not bother to use a signed certificate with Webmin, as there is no real advantage in security once you have accepted an unsigned certificate into your browser for the first time.

If you do want to obtain a real valid certificate, however, the steps to follow are:

1.
At the shell prompt, run the openssl genrsa -out key.pem 1024 command. This will create the key.pem file, which is your private key.

2.
Run the openssl req -new -key key.pem -out req.pem command. When it asks for the common name, be sure to enter the full hostname of your server as used in the URL, like www.yourserver.com. This will create the req.pem file, which is the certificate signing request (CSR).

3.
Send the CSR to your certificate authority by whatever method they use. They should send you back a file that starts with —BEGIN CERTIFICATE— which can be put in the cert.pem file.

4.
In Webmin, enter the Webmin Configuration module and click on SSL Encryption.

5.
In the SSL Encryption form (shown in Figure 3.2), enter the path to your key.pem file into the Private key file field, and the path to your cert.pem file into the Certificate file field.

6.
Click the Save button to switch to the new certificate.

From now on, your browser should no longer display a warning when connecting to Webmin in SSL mode.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
3.142.196.27