Subsonic Forum

Hello,

I am currently using subsonic 4.7, i buy a ssl certificate in https://www.namecheap.com/ .
Subsonic 4.7 is hosted on a server Debian Squeeze.

I used the following command line to get my CSR:

openssl req -nodes -newkey rsa:2048 -keyout myserver.key -out server.csr

I have two files myserver.key and server.csr.

Then:

cat server.csr

it gives me the key csr, i informed the CSR in namecheap.com.

I got 3 files from namecheap.com :

AddTrustExternalCARoot.crt PositiveSSLCA2.crt mydomain.crt.

Can you give me the command line to inform my ssl certificate signed subsonic 4.7 please .

I have a very little English I'm French please excuse me.

Cordially.

I find no tutorial for GNU/Linux .

Cordially.

Nobody ever install a ssl certificate with Subsonic ?

0.o

To have Java trust a new CA, you'd normally do something like keytool -import -trustcacerts -alias root -file xx.crt -keystore /path/to/cacerts

Keytool is a command found in the same bin directory as java. cacerts is a file that contains your currently trusted CAs, normally found in jre/lib/security/cacerts or something like that.

If you google search "keytool import cacerts", you'll surely find it.

And the default password is "changeit".

hakko wrote:To have Java trust a new CA, you'd normally do something like keytool -import -trustcacerts -alias root -file xx.crt -keystore /path/to/cacerts

Keytool is a command found in the same bin directory as java. cacerts is a file that contains your currently trusted CAs, normally found in jre/lib/security/cacerts or something like that.

If you google search "keytool import cacerts", you'll surely find it.

Hello,

I tried the command: sudo keytool -import -trustcacerts -alias root -file mycert.crt -keystore /usr/lib/jvm/java-6-openjdk/jre/lib/security/cacerts && sudo service subsonic reload , i have this result:



It works not.

Thank you for your answer ^^.

That message says that your browser doesn't trust the CA cert, right? Then you have to tell your browser to approve it.

hakko wrote:That message says that your browser doesn't trust the CA cert, right? Then you have to tell your browser to approve it.

Yes that's right, i purchased a certificate I should not have this error message .

Can someone help me please .

Unless the certificate that you purchased has the name of YOUR IP ADDRESS it will never match the name that the browser is expecting it to have.

And unless you have a static IP address the certificate will only be good until your ip address changes.

Sorry,

Glenn

bushman4 wrote:Unless the certificate that you purchased has the name of YOUR IP ADDRESS it will never match the name that the browser is expecting it to have.

And unless you have a static IP address the certificate will only be good until your ip address changes.

Sorry,

Glenn

My Subsonic is hosted by a provider I have a fixed IP

You have not a clear tutorial to install its own ssl certificate please

What is the name assigned to the certificate that you bought? Does it match the IP address of your site?

If so please translate that error message above into English.

Glenn

Are you aware that different browsers have their own sets of trusted CAs, and that if your CA is not chained to one of the pre-installed ones, you manually have to tell your browser to start trusting it (verifying fingerprints yourself)?

openssl req -nodes -newkey rsa:2048 -keyout t411-wiki.me.key -out server.csr
Generating a 2048 bit RSA private key
....................+++
...................+++
writing new private key to 't411-wiki.me.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:FR
State or Province Name (full name) [Some-State]:Paris
Locality Name (eg, city) []:France
Organization Name (eg, company) [Internet Widgits Pty Ltd]:subsonic.org
Organizational Unit Name (eg, section) []:subsonic.org
Common Name (eg, YOUR name) []:t411-wiki.me
Email Address []:webmaster@t411-wiki.me

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

cat server.csr

-----BEGIN CERTIFICATE REQUEST-----
BLAH
-----END CERTIFICATE REQUEST-----

This is correct?.

My subsonic is available at https://t411-wiki.me:4043 .