Changes between Version 19 and Version 20 of InstallDiscoveryBrowse

Timestamp:

11/10/07 09:34:03 (13 years ago)

Author:

pjkersha

Comment:

--

InstallDiscoveryBrowse

@@ -235 +235 @@
 Details may vary according to the version of Apache you use.  Please check the relevant Apache documentation for correct settings.  The example uses a redirect to `localhost`.  To expose outside, use `your-site-discovery-url`.
 
-In the discovery config file, `/etc/ndg/ows_server/conf/ndgDiscovery.config`, the `server` field should be assigned `http://your-site-discovery-url` and `sslServer` to `https://your-site-discovery-url`:
+These changes should be reflected in the discovery config file, `/etc/ndg/ows_server/conf/ndgDiscovery.config`.  The `server` field should be assigned `http://your-site-discovery-url` and `sslServer` to `https://your-site-discovery-url`:
 {{{
 [DEFAULT]
@@ -272 +272 @@
 }}}
 
-When you receive the signed certificate copy it into `/etc/ndg/ows_server/conf/certs/discovery.crt`. Once you have the certificate, the certificate request file `discovery.csr` can be removed.
-
-The new certificate and private key should be referenced in the discovery config file (`/etc/ndg/ows_server/conf/ndgDiscovery.config`) as follows:
+When you receive the signed certificate copy it into `/etc/ndg/ows_server/conf/certs/discovery.crt`. Once you have the certificate, the certificate request file `discovery.csr` can be removed.  You should also receive a copy of the CA certificate.  If not [mailto:P.J.Kershaw@rl.ac.uk request] it.
+
+Certificate files can be checked with `openssl` e.g. the command following command will print out the Distinguished Name for the CA certificate:
+
+{{{
+openssl x509 -in cacert.crt -subject
+}}}
+
+The new discovery certificate and private key and CA certificate files should be referenced in the discovery config `/etc/ndg/ows_server/conf/ndgDiscovery.config`) as follows:
 {{{
 # WS-Security signature handler
@@ -287 +293 @@
 # Password for private key - comment out if the file is not password protected
 wssKeyPwd: password
+
+# Space separated list of CA cert. files to validate certs against when
+# verifying responses
+wssCACertFilePathList: /etc/ndg/ows_server/conf/certs/cacert.crt
 }}}