Difference between revisions of "HowTo Regenerate The TLS (SSL) Certificate For The NST WUI"

From NST Wiki
Jump to navigationJump to search
(Overview)
(Overview)
Line 1: Line 1:
 
__TOC__
 
__TOC__
 
= Overview =
 
= Overview =
This page demonstrates how to regenerate the '''[https://en.wikipedia.org/wiki/Transport_Layer_Security TLS]''' (Deprecated predecessor: [https://en.wikipedia.org/wiki/SSL SSL])''' self-signing certificate for the NST WUI.
+
This page demonstrates how to regenerate the '''[https://en.wikipedia.org/wiki/Transport_Layer_Security TLS] (Deprecated predecessor: [https://en.wikipedia.org/wiki/SSL SSL])''' self-signing certificate for the NST WUI.
  
 
= nstcert =
 
= nstcert =

Revision as of 07:02, 22 November 2019

Overview

This page demonstrates how to regenerate the TLS (Deprecated predecessor: SSL) self-signing certificate for the NST WUI.

nstcert

The process of generating an SSL key and certificate files and then making use of them in a Apache® configuration file can be a time consuming process. The "nstcert" script attempts to automate part of the process by generating template files for use within the Apache® httpd daemon. The script also generates a PEM (Privacy-enhanced Electronic Mail) file.

Generate a new TLS Certificate for the NST WUI

If one needs to generate a new self-signing SSL certificate for NST WUI usage, the following help script: "/usr/libexec/nstwui-ssl-gencerts" may be utilized. It uses the nstcert script described above in combination with the configuration file: "/etc/nst/wui/nstcert.conf". Edit this file to suit your needs.

sudo /usr/libexec/nstwui-ssl-gencerts -r

The "-r" option is necessary to remove the previous SSL certificate.

Stricter Trusted Certificate Security Requirements