Subject: How to renew and install SSL certificate for
Virtualmin/Webmin, Apache web server, Dovecot and Postfix for a
company in Singapore on 6 Dec 2021 Mon
Author: Mr. Turritopsis Dohrnii Teo En Ming (TARGETED INDIVIDUAL)
Country: Singapore
Date: 6 Dec 2021 Monday Singapore Time
Type of Publication: Plain Text
Document Version: 20211206.01
DETAILED INSTRUCTIONS
=
Section 1: Generate Certificate Signing Request (CSR)
=
Putty/SSH into your Linux server.
# cd /root
# mkdir teo-en-ming-6dec2021
# openssl req -new -newkey rsa:2048 -nodes -keyout 2022.key -out 2022.csr
Generating a 2048 bit RSA private key
+++
+++
writing new private key to '2022.key'
-
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-
Country Name (2 letter code) [XX]:SG
State or Province Name (full name) []:Singapore
Locality Name (eg, city) [Default City]:Singapore
Organization Name (eg, company) [Default Company Ltd]:Teo En Ming Corporation
Organizational Unit Name (eg, section) []:IT Department
Common Name (eg, your name or your server's hostname) []:*.teo-en-ming-corp.com
Email Address []:c...@teo-en-ming-corp.com
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
# mv 2022.* teo-en-ming-6dec2021/
# cd teo-en-ming-6dec2021/
Displaying the contents of the CSR.
# cat 2022.csr
-BEGIN CERTIFICATE REQUEST-
Blah blah blah
-END CERTIFICATE REQUEST-
IMPORTANT NOTICE
How to submit the CSR to your commercial certificate authority and how
to generate SSL server certificate is beyond the scope of this
tutorial. Instructions will be provided by your commercial certificate
authority.
Section 2: Installing SSL certificate in Virtualmin/Webmin
==
Login to Virtualmin.
Click Server Configuration > SSL Certificate
# cd /root/teo-en-ming-6dec2021
# nano 2022.crt
Paste the SSL certificate generated by your commercial certificate
authority as below.
-BEGIN CERTIFICATE-
Blah blah blah
-END CERTIFICATE-
Displaying the contents of the secret key.
# cat 2022.key
-BEGIN PRIVATE KEY-
Blah blah blah
-END PRIVATE KEY-
# cd /root/teo-en-ming-6dec2021/
# cp 2022.* /home/teo-en-ming-corp
Click Server Configuration > SSL Certificate > Update Certificate and Key
New certificate details
=
Signed SSL certificate:
Click File on server: /home/teo-en-ming-corp/2022.crt
Matching private key:
File on server: /home/teo-en-ming-corp/2022.key
Private key password: Click "None needed"
Click "Install Now"
Section 3: Installing SSL Certificate on Apache Web Server
===
After you have performed the steps in Section 2 above, the SSL
certificate for Apache web server will be also renewed automatically
as well.
Section 4: Installing SSL Certificate on Dovecot IMAP and POP3
Incoming Mail Server
# cat /home/teo-en-ming-corp/intermediate_domain_ca.crt
-BEGIN CERTIFICATE-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