How to generate server.ca file

General support questions
Post Reply
saeed
Posts: 20
Joined: 2014/05/30 14:50:33

How to generate server.ca file

Post by saeed » 2014/08/05 10:03:07

Hi
This might be a simple stupid question. BUT I have not found the answer to it anywhere. So please be patient and kind enough to answer it if you can. I had two files in my ssl.crt in the path /etc/httpd/conf/ of my Centos 6.5 sever. They included server.ca and server.crt. My question is how I can generate this file myself because I inadvertently deleted the file, now apache won't start without it.

Thnaks

User avatar
TrevorH
Forum Moderator
Posts: 29667
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: How to generate server.ca file

Post by TrevorH » 2014/08/05 11:00:11

Those files were not supplied by CentOS. If you install mod_ssl then you get files called /etc/pki/tls/certs/localhost.crt and /etc/pki/tls/private/localhost.key by default and those are referenced from /etc/httpd/conf.d/ssl.conf. I don't know what generated the files you have but it's impossible for us to tell you how to get them back. If the server.ca file contained a certificate authority created by someone in your organisation then they ought to have a copy of it that they can provide you.
CentOS 6 will die in November 2020 - migrate sooner rather than later!
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 is dead, do not use it.
Full time Geek, part time moderator. Use the FAQ Luke

saeed
Posts: 20
Joined: 2014/05/30 14:50:33

Re: How to generate server.ca file

Post by saeed » 2014/08/05 11:11:00

Hi

Navigating to

Code: Select all

/etc/pki/tls/certs/
I have

Code: Select all

ca-bundle.crt  ca-bundle.trust.crt  make-dummy-cert  Makefile  renew-dummy-cert
can "ca-bundle.crt" be responsible for the mentioned file?

By the way, can you explain the function of "renew-dummy-cert" file here?

Thanks alot

User avatar
TrevorH
Forum Moderator
Posts: 29667
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: How to generate server.ca file

Post by TrevorH » 2014/08/05 11:13:46

I have no idea what was in the file but I suspect it was a CA from your organisation. If you didn't create it then someone else did since it didn't come from CentOS. Unfortunately my crystal ball is in the shop for repair so I am unable to tell you what it used to contain :-(

The ca-bundle you are looking at contains certs from recognised certificate authorities and is supplied by CentOS. The chances that your server.ca is in this are slim to nil.
CentOS 6 will die in November 2020 - migrate sooner rather than later!
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 is dead, do not use it.
Full time Geek, part time moderator. Use the FAQ Luke

Post Reply

Return to “CentOS 6 - General Support”