Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

Click here to return to the 'Okay, how do you obtain the cert?' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Okay, how do you obtain the cert?
Authored by: 47ronin on Jan 24, '03 03:53:29PM

It's not a bad thing that people want to know HOW to get the self-signed certs... can anyone now please explain the procedure? I have self-signed certs for Webmin and I can't use Safari for server setup until I can export the cert. Thanks in advance.

[ Reply to This | # ]
Okay, how do you obtain the cert?
Authored by: maged on Jan 24, '03 04:19:59PM
Webmin FAQ #14 Does this help? Haven't tried webmin on OS X yet, but the std UNIX distribution puts the cert under:
Could also search your drive for *.pem or *.der

[ Reply to This | # ]
Okay, how do you obtain the cert (part 2)?
Authored by: maged on Jan 24, '03 04:44:19PM
Sorry, I hit submit before finishing... if you are running SSL to your own apache server, then on the server check under /etc/httpd. Normally it will be installed under a directory under here (e.g. "ssl').

You can also check the httpd.conf text file in the same directory above--search for:

You should find something like:
SSLCertificateFile /etc/httpd/ssl/cert-2001.pem

SSLCertificateKeyFile /etc/httpd/ssl/privkey-2001.pem

See also Marc Liyanage's help page on Apache mod_ssl on OS X

[ Reply to This | # ]
RE: Okay, how do you obtain the cert?
Authored by: clarkcb on Jan 24, '03 04:33:01PM

If you are using IE on a PC (sorry, this is the only one I know), the process is:

1. Select Internet Options from the Tools menu in IE
2. Select the Content tab
3. Click the Certificates button
4. Click the Advanced... button and verify that the Export format is defined as "DER encoded binary...". Click OK.
5. Drag the certificate you want to export to your desktop. This creates a .DER-encoded .cer file on your desktop that you will import from.
6. Assuming the file is named "MyCert.cer", copy this file to your home directory on your Mac (via a Samba share or scp; there are other hints that explain these), then run the following in Terminal (in your home directory, which is what Terminal starts in):

% certtool i MyCert.cer k=X509Anchors d

Hope this helps.

[ Reply to This | # ]