topic Re: OpenVms SSL in Operating System - OpenVMS

OpenVms SSL

wendling — Fri, 01 Apr 2011 06:20:15 GMT

hello,
OpenVms alpha 7.3-2 , SSL 1.3-2

SSL is intalled, now an other partner want to do secure transfert with us (CFT) they send us a file "file.crt".
How do i install/configure this .CRT file?
Thank's in advance.
Gerard

Re: OpenVms SSL

Hoff — Fri, 01 Apr 2011 12:44:26 GMT

Call the support center; this stuff isn't particularly well documented.

Here's the documentation on SSL, and (unfortunately) SSL definitely isn't turn-key...

http://h71000.www7.hp.com/openvms/products/ssl/ssl_doc.html

Here's the main manual for key management:

http://h71000.www7.hp.com/doc/732final/aa-rscvb-te/aa-rscvb-te.pdf

View the certificate (page 34) to make sure the certificate looks OK, and decodes correctly.

The technique used for Apache is listed on page 38. Other applications can require other directories.

The mail SSL directory is SSL$ROOT:[CERTS] (which is usually SSL$CERTS logical name.)

Have a look at the demo tool in the SSL directories, too, and specifically at the certificate-creation DCL stuff:

http://h71000.www7.hp.com/doc/83final/ba554_90007/ch05s02.html

And here's one of the better resources on this topic:

http://www3.sympatico.ca/n.rieck/docs/openvms_notes_ssl.html

Re: OpenVms SSL

wendling — Tue, 05 Apr 2011 06:16:33 GMT

Thank's Hof i'll have a look to these documentations.
In fact i just want to replace an expired certificate (.crt file). I noticed that the old file was copied to an ssl directory.
Do you think that i just need to copy the new .crt file to the same directory and restart SSL?