Editing NetHere (section)

==== SSL certificate installs ====



1) Whois the site for information on Registrant, email -  to be used for SSL generation
# whois domain.tld

2) Create SSL self signed certificate, get CSR for customer to sign
  a) SSL generation is done by script: /nethere/conf/apache/pki/newsslcert.sh 
  b) Copy CSR for customer

3) Create/update Apache configuration files via NH script (webadd_ssl)
  # /nethere/sbin/webadd_ssl -h for usage
  a) webadd_ssl [-h] [-d domain] [-s ssl_domain] [-n]
  # webadd_ssl -d www.domain.tld -s www.domain.tld 
 
4) Update DNS zone with new IP address - done on ns1.nethere.net
  a) Check out DNS zone file in /named/master
     # co -l domain.tld
  b) Adjust A records:
   --cut--
   ;; unixweb-##  << enter the unixweb server number for ease of ID
   @		IN	A	vhost_ip_address
   www	IN	A	vhost_ip_address
   --cut--	
  c) Check in DNS zone file
     # ci -u domain.tld < /dev/null
  d) Reload zone file
     # rndc reload domain.tld
  e) check /var/log/named for errors

5) Update DNS PTR record for IP address - done on ns1.nethere.net
  Note: Assuming IP address a.b.c.d
  a) Check out in-addr.arpa zone for IP address in /named/master
     # co -l a.b.c 
  b) Follow format for PTR records   --cut--
   d	IN	PTR	www.domain.tld.
   --cut--
  c) Check in PTR zone file     # ci -u a.b.c < /dev/null
  d) Reload PTR zone 
     # rndc reload c.b.a.in-addr.arpa
  e) check /var/log/named for errors