SSL Certificates

Sabbo

unread,

Mar 21, 2016, 6:38:00 PM3/21/16

to security-onion

Is there detail available on how to change the SSL certs for SO? I am tired of getting browser errors!

Wes

unread,

Mar 21, 2016, 6:48:52 PM3/21/16

to security-onion

On Monday, March 21, 2016 at 6:38:00 PM UTC-4, Sabbo wrote:
> Is there detail available on how to change the SSL certs for SO? I am tired of getting browser errors!

Sabbo,

You could try something like the following for a self-signed cert:

https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-ubuntu-14-04

Otherwise, try adding your own cert/key to "/etc/ssl/certs/"

Thanks,
Wes

Sabbo

unread,

Mar 21, 2016, 7:33:34 PM3/21/16

to security-onion

Thanks Wes,

which is the cert already used, can i just replace that, even with another self signed that is already pushed out to our clients?

Wes

unread,

Mar 21, 2016, 7:47:43 PM3/21/16

to security-onion

On Monday, March 21, 2016 at 7:33:34 PM UTC-4, Sabbo wrote:
> Thanks Wes,
>
> which is the cert already used, can i just replace that, even with another self signed that is already pushed out to our clients?

Sabbo,

Almost forgot. You may need to modify the following as well:

/etc/apache2/sites-available/elsa
/etc/apache2/sites-available/snorby
/etc/apache2/sites-available/xplico

The default cert used in default-ssl.conf is snakeoil.pem (and .key). For all these, you should be able to replace the path with the certificate (and path) for which you which to use.