Creating a CA-signed certificateΒΆ

To create an SSL certificate signed by a trusted certificate authority or CA, follow these steps:

  1. After enabling SSL, send the /etc/pki/tls/private/ca.csr file to the CA to be signed and ask them to return it as Base64 encoded.

Important

When exporting a certificate, do not select DER encoded as the export file format.

  1. Once the CA-signed certificate is received, stop the Apache service by entering service httpd stop.

  2. Replace the active SSL certificate with the new one and rename the file to *//etc/pki/tls/certs/ca.crt.

  3. Restart the Apache service by entering service httpd start.