FAQ | This is a LIVE service | Changelog

Document procedure for updating SSL certificates for dev-group services

Document how we install new certificates or update the certificates for dev-group services.

If guidebook isn't the right place to do this feel free to move this issue.

Ben H has given some instructions about the steps he took to update the intermediate certificate on for the search frontend:

What I've done is, on each of search-node1 and search-node2:

Create a new file, /srv/www/tomcat6/base/conf/qvsslg3.crt, containing the
new intermediate certificate (pulled from a helpful email that someone in
UIS sent round).  Remove any blank lines from it.

In /srv/www/tomcat6/base/conf/server.xml, edit the line that says:

certificateChainFile="/srv/www/tomcat6/base/conf/QuoVadisGlobalSSLICAG3.crt"

to say:

certificateChainFile="/srv/www/tomcat6/base/conf/qvsslg3.crt"

Restart Tomcat:

service tomcat6 restart
Edited by Monty Dawson