Page MenuHomePhorge

D84.1775243449.diff
No OneTemporary

Authored By
Unknown
Size
2 KB
Referenced Files
None
Subscribers
None

D84.1775243449.diff

diff --git a/source/installation-guide/kolab-14/debian-7-enterprise-14.rst b/source/installation-guide/kolab-14/debian-7-enterprise-14.rst
--- a/source/installation-guide/kolab-14/debian-7-enterprise-14.rst
+++ b/source/installation-guide/kolab-14/debian-7-enterprise-14.rst
@@ -14,8 +14,8 @@
.. parsed-literal::
- deb https://mirror.kolabsys.com/debian/kolab-14/ wheezy release updates
- deb-src https://mirror.kolabsys.com/debian/kolab-14/ wheezy release updates
+ deb https://mirror.kolabenterprise.com/debian/kolab-14/ wheezy release updates
+ deb-src https://mirror.kolabenterprise.com/debian/kolab-14/ wheezy release updates
3. To ensure the Kolab packages have priority over the Debian packages, such as
must be the case for PHP as well as Cyrus IMAP, please make sure the APT
@@ -26,11 +26,43 @@
.. parsed-literal::
Package: *
- Pin: origin mirror.kolabsys.com
+ Pin: origin mirror.kolabenterprise.com
Pin-Priority: 501
4. Install the client certificate and certificate authority files:
+ A. Remove the passphrase from the SSL certificate key:
+
+ .. parsed-literal::
+
+ # :command:`openssl rsa -in /path/to/private.key \\
+ -out /path/to/private.key.nopass`
+
+ B. Concatenate the certificate file and the new key file without
+ passphrase:
+
+ .. parsed-literal::
+
+ # :command:`cat /path/to/public.crt /path/to/private.key.nopass \\
+ > /path/to/mirror.kolabsys.com.client.pem`
+
+ C. Place the file :file:`mirror.kolabsys.client.pem` in
+ :file:`/etc/apt/certs/`.
+
+ D. Download the kolabenterprice mirror certificate:
+
+ .. parsed-literal::
+
+ # :command:`cd /etc/apt/certs/`
+ # :command:`wget https://ssl.kolabsys.com/mirror.kolabenterprise.com.ca.cert`
+
+ E. Correct the permissions on the private key:
+
+ .. parsed-literal::
+
+ # :command:`chown root:root /etc/apt/certs/mirror.kolabsys.com.client.pem`
+ # :command:`chmod 640 /etc/apt/certs/mirror.kolabsys.com.client.pem`
+
5. Configure **APT** to use the certificates installed in step 4 by
creating a file ``/etc/apt/apt.conf.d/71kolab`` with the following
contents:
@@ -39,10 +71,10 @@
Acquire {
https {
- mirror.kolabsys.com {
- Verify-Peer "false";
- Verify-Host "false";
- CaInfo "/etc/apt/certs/mirror.kolabsys.com.ca.cert";
+ mirror.kolabenterprise.com {
+ Verify-Peer "true";
+ Verify-Host "true";
+ CaInfo "/etc/apt/certs/mirror.kolabenterprise.com.ca.cert";
SslCert "/etc/apt/certs/mirror.kolabsys.com.client.pem";
SslKey "/etc/apt/certs/mirror.kolabsys.com.client.pem";

File Metadata

Mime Type
text/plain
Expires
Fri, Apr 3, 7:10 PM (16 h, 20 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
18824156
Default Alt Text
D84.1775243449.diff (2 KB)

Event Timeline