How to install certs for web access

Question

Hi all: While I have done this several times using ConsoleOne in previous versions of GW, I cannot seem to find a good write-up on installing certificates for Web Access in GW 2014. I came across this TID (https://www.novell.com/support/kb/doc.php?id=7010584) but I am not sure this applies to Web Access. Can anyone point me to a How-To or TID which describes installing certs specifically for Web Access (2014)? We are running GW 2014.0.1 on an OES11 SP2 server.
Thanks, Chris.

Answer 1

Hi Chris,
The TID you referenced in your first post also applies to WebAccess.
When running GroupWise/WebAccess on OES/SLES/Linux, it's not really about doing something for GroupWise WebAccess, but about doing something for Apache. So you can approach this as a generic Apache thing.
Originally Posted by cmosentine
PS: Our certs are from GoDaddy. We have two files, ourdomain.crt and sf_bundle.crt. If I follow the TID I referenced, I am not sure where these should be placed in the configuration file.
If you have those files you can add them to the apache2 configuration as the TID mentions.
You are missing one file in your listing.... the key file. Without the key file, it won't work.
If you have those three files on the webaccess server, simply add lines to the vhost file;
SSLCertificateFile </path/to/ourdomain.crt)>
SSLCertificateKeyFile </path/to/ourdomain.key)>
SSLCertificateChainFile <path/to/sf_bundle.crt>
Then reload Apache.
Also make sure root is the only user that can read those files (mainly important to shield the key file used).
If there are no errors upon reloading Apache, the new certificates should then be in use.
In general, this blog post might give some more insight on the openssl process :https://www.digitalocean.com/communi...-keys-and-csrs
There are many others that might explain it better.
Cheers,
Willem