In case if you use x.509 complaint certificate and PKCS#8 Private Key as per cloudstack documentation then we need to provide the details like below:
1) copy server.crt content [i.e your generated x.509 complaint certificate content : copy from ' -----BEGIN CERTIFICATE----- MIIDnjC... -----END CERTIFICATE-----' ] and paste into the first text field. (2) copy and paste your PKCS#8key to the second field(copy from Begin to End same as above format) (3) input your domain suffix. Once ur ssl certificate is uploaded successfully and your system Vms will be recreated with your new certificate. Also In FF,we need to manually import the cert file otherwise it fail to open the console.(Tools-Options-Certificates-view certificate-Import your certificate) Regards Sadhu -----Original Message----- From: Wei ZHOU [mailto:ustcweiz...@gmail.com] Sent: 28 February 2014 18:30 To: dev@cloudstack.apache.org Subject: Re: Changing the SSL certificate for my own realhostip There are three text fields, (1) copy certificate.crt and ca_bundle.crt, paste into the first text fields. (2) copy your key to the second (3) input your domain suffix 2014-02-28 13:23 GMT+01:00 Nux! <n...@li.nux.ro>: > Hi, > > I'm trying to implement my own realhostip and I have a problem with > adding the certificate. > > What I have is a Comodo wildcard ca_bundle, crt and key in pem format > (for use with Apache HTTPD) and Cloudstack is asking for "X.509 > compliant SSL certificate" and "PKCS#8 Private Key". I have never used > these formats and seem to be popular within the java world. I tried > converting what I had from pem to der (pkcs8?) format[1], but what I > get is some binary .der file that's "illegible" and can't really be > copy-pased into the UI. > > Can someone advise on what steps I should take to get my SSL certs > into ACS? I'm on 4.3.0 rev 4440. > > Regards, > Lucian > > [1] > cat ca_bundle.crt certificate.crt > certificate.pem openssl x509 > -outform der -in certificate.pem -out certificate.der > > -- > Sent from the Delta quadrant using Borg technology! > > Nux! > www.nux.ro >
