Go to the table of contents Go to the previous page You are at the end of the document View or print as PDF
Changing the Management Server IP Address or Name : Creating Apache SSL Certificates
Creating Apache SSL Certificates
Changing the Management Server | Web Protection Solutions | 30-Nov-2018
 
Perform the following steps on the Forcepoint management server to create (or re-create) Apache SSL certificates for the web protection management components.
Note that these are basic instructions for creating certificates. Changing the password on certificates is not included in these steps. Avoid changing passwords if possible.
1.
*
*
2.
Review the Websense\Web Security\apache\conf\ssl\openssl.txt file to verify that it contains correct information.
If the IP address of this machine has changed, for example, edit the IP address in the openssl.txt file to match.
 
Note 
3.
Go to the Websense\Web Security\apache\conf\ssl\automation\ directory and run the following scripts in the order shown:
a.
b.
c.
d.
4.
Copy the Websense\Web Security\apache\conf\ssl\output\server.key file to:
Websense\Web Security\apache\conf\ssl\ssl.key\server.key
5.
Copy the Websense\Web Security\apache\conf\ssl\output\server.crt file to:
Websense\Web Security\apache\conf\ssl\ssl.crt\server.crt
6.
Copy the Websense\Web Security\apache\conf\ssl\output\cakey.pem file to:
Websense\Web Security\apache\conf\ssl\private\cakey.pem
7.
Copy the \Web Security\apache\conf\ssl\output\manager.p12 file to:
Websense\Web Security\tomcat\conf\keystore\tomcat\manager.p12
8.
*
*
 
Note 
For this article more information about Apache SSL.
Using a batch file for Apache SSL certificate file operations
When creating Apache SSL certificates, there are several batch files to execute and files to copy. Optionally automate the process by creating and running a batch file.
Use the following sample set of batch commands as a template for the batch file. Replace <installation_path> with the actual installation directory used on the management server machine (C:\Program Files (x86)\Websense, by default).
@echo off
set HOME=<installation_path>\Web Security
set WORKING_DIR=%HOME%\apache\conf\ssl\automation
call "%WORKING_DIR%\s1_newreq.bat"
call "%WORKING_DIR%\s2_server_key.bat"
call "%WORKING_DIR%\s3_server_crt.bat"
call "%WORKING_DIR%\s4_server_p12.bat"
 
@echo on
copy "%HOME%\apache\conf\ssl\output\server.key" "%HOME%\apache\conf\ssl\ssl.key\server.key"
copy "%HOME%\apache\conf\ssl\output\server.crt" "%HOME%\apache\conf\ssl\ssl.crt\server.cr"
copy "%HOME%\apache\conf\ssl\output\cakey.pem" "%HOME%\apache\conf\ssl\private\cakey.pem"
copy "%HOME%\apache\conf\ssl\output\manager.p12" "%HOME%\tomcat\conf\keystore\tomcat\manager.p12"
 
©2018 Forcepoint. Forcepoint and the FORCEPOINT logo are trademarks of Forcepoint. Raytheon is a registered trademark of Raytheon Company. All other trademarks used in this document are the property of their respective owners.

Go to the table of contents Go to the previous page You are at the end of the document View or print as PDF
Changing the Management Server IP Address or Name : Creating Apache SSL Certificates
Copyright 2018 Forcepoint. All rights reserved.