diff --git a/source/installation-guide/kolab-14/debian-7-enterprise-14.rst b/source/installation-guide/kolab-14/debian-7-enterprise-14.rst --- a/source/installation-guide/kolab-14/debian-7-enterprise-14.rst +++ b/source/installation-guide/kolab-14/debian-7-enterprise-14.rst @@ -4,20 +4,23 @@ Installation of Kolab Enterprise 14 on Debian 7 (Wheezy) ======================================================== -1. Install the **apt-transport-https** package: +1. As with any Kolab installation, it is essential that the host has a FQDN. + + +2. Install the **apt-transport-https** package: .. parsed-literal:: # :command:`aptitude -y install apt-transport-https` -2. Add the following two lines to ``/etc/apt/sources.list.d/kolab.list``: +3. Add the following two lines to ``/etc/apt/sources.list.d/kolab.list``: .. parsed-literal:: - deb https://mirror.kolabsys.com/debian/kolab-14/ wheezy release updates - deb-src https://mirror.kolabsys.com/debian/kolab-14/ wheezy release updates + deb https://mirror.kolabenterprise.com/debian/kolab-14/ wheezy release updates + deb-src https://mirror.kolabenterprise.com/debian/kolab-14/ wheezy release updates -3. To ensure the Kolab packages have priority over the Debian packages, such as +4. To ensure the Kolab packages have priority over the Debian packages, such as must be the case for PHP as well as Cyrus IMAP, please make sure the APT preferences pin the mirror.kolabsys.com origin as a preferred source. @@ -26,12 +29,44 @@ .. parsed-literal:: Package: * - Pin: origin mirror.kolabsys.com + Pin: origin mirror.kolabenterprise.com Pin-Priority: 501 -4. Install the client certificate and certificate authority files: +5. Install the client certificate and certificate authority files: + + A. Remove the passphrase from the SSL certificate key: + + .. parsed-literal:: + + # :command:`openssl rsa -in /path/to/private.key \\ + -out /path/to/private.key.nopass` + + B. Concatenate the certificate file and the new key file without + passphrase: + + .. parsed-literal:: + + # :command:`cat /path/to/public.crt /path/to/private.key.nopass \\ + > /path/to/mirror.kolabsys.com.client.pem` + + C. Place the file :file:`mirror.kolabsys.client.pem` in + :file:`/etc/apt/certs/`. + + D. Download the kolabenterprice mirror certificate: + + .. parsed-literal:: + + # :command:`cd /etc/apt/certs/` + # :command:`wget https://ssl.kolabsys.com/mirror.kolabenterprise.com.ca.cert` + + E. Correct the permissions on the private key: + + .. parsed-literal:: + + # :command:`chown root:root /etc/apt/certs/mirror.kolabsys.com.client.pem` + # :command:`chmod 640 /etc/apt/certs/mirror.kolabsys.com.client.pem -5. Configure **APT** to use the certificates installed in step 4 by +6. Configure **APT** to use the certificates installed in step 4 by creating a file ``/etc/apt/apt.conf.d/71kolab`` with the following contents: @@ -39,10 +74,10 @@ Acquire { https { - mirror.kolabsys.com { - Verify-Peer "false"; - Verify-Host "false"; - CaInfo "/etc/apt/certs/mirror.kolabsys.com.ca.cert"; + mirror.kolabenterprise.com { + Verify-Peer "true"; + Verify-Host "true"; + CaInfo "/etc/apt/certs/mirror.kolabenterprise.com.ca.cert"; SslCert "/etc/apt/certs/mirror.kolabsys.com.client.pem"; SslKey "/etc/apt/certs/mirror.kolabsys.com.client.pem"; @@ -50,18 +85,18 @@ }; }; -6. Update the repository metadata: +7. Update the repository metadata: .. parsed-literal:: # :command:`apt-get update` -7. Start the installation of the base package as follows: +8. Start the installation of the base package as follows: .. parsed-literal:: # :command:`aptitude install kolab` -8. When asked to confirm you want to install the package and its dependencies, press Enter. +9. When asked to confirm you want to install the package and its dependencies, press Enter. Continue to :ref:`installation-guide-setup-kolab`.