Changes between Version 19 and Version 20 of InstallDiscoveryBrowse


Ignore:
Timestamp:
11/10/07 09:34:03 (12 years ago)
Author:
pjkersha
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • InstallDiscoveryBrowse

    v19 v20  
    235235Details may vary according to the version of Apache you use.  Please check the relevant Apache documentation for correct settings.  The example uses a redirect to `localhost`.  To expose outside, use `your-site-discovery-url`. 
    236236 
    237 In the discovery config file, `/etc/ndg/ows_server/conf/ndgDiscovery.config`, the `server` field should be assigned `http://your-site-discovery-url` and `sslServer` to `https://your-site-discovery-url`: 
     237These changes should be reflected in the discovery config file, `/etc/ndg/ows_server/conf/ndgDiscovery.config`.  The `server` field should be assigned `http://your-site-discovery-url` and `sslServer` to `https://your-site-discovery-url`: 
    238238{{{ 
    239239[DEFAULT] 
     
    272272}}} 
    273273 
    274 When you receive the signed certificate copy it into `/etc/ndg/ows_server/conf/certs/discovery.crt`. Once you have the certificate, the certificate request file `discovery.csr` can be removed. 
    275  
    276 The new certificate and private key should be referenced in the discovery config file (`/etc/ndg/ows_server/conf/ndgDiscovery.config`) as follows: 
     274When you receive the signed certificate copy it into `/etc/ndg/ows_server/conf/certs/discovery.crt`. Once you have the certificate, the certificate request file `discovery.csr` can be removed.  You should also receive a copy of the CA certificate.  If not [mailto:P.J.Kershaw@rl.ac.uk request] it. 
     275 
     276Certificate files can be checked with `openssl` e.g. the command following command will print out the Distinguished Name for the CA certificate: 
     277 
     278{{{ 
     279openssl x509 -in cacert.crt -subject 
     280}}} 
     281 
     282The new discovery certificate and private key and CA certificate files should be referenced in the discovery config `/etc/ndg/ows_server/conf/ndgDiscovery.config`) as follows: 
    277283{{{ 
    278284# WS-Security signature handler 
     
    287293# Password for private key - comment out if the file is not password protected 
    288294wssKeyPwd: password 
     295 
     296# Space separated list of CA cert. files to validate certs against when 
     297# verifying responses 
     298wssCACertFilePathList: /etc/ndg/ows_server/conf/certs/cacert.crt 
    289299}}} 
    290300