Skip to content

Archive Trac dn ws

Jump to bottom
madscatt edited this page Jun 20, 2026 · 1 revision

Dn Ws

Legacy Trac archive page imported from dn_ws. Source: https://genapp.rocks/wiki/wiki/dn_ws. Review age, links, and examples before treating as current.

websocket notes

cd /etc/ssl/certs
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout slackgenapp.key -out slackgenapp.crt
openssl req -x509 -nodes -sha256 -days 1460 -newkey rsa:4096 -keyout slackgenapp.key -out slackgenapp.crt

- cert info
  - survival guide http://www.zytrax.com/tech/survival/ssl.html
- buy
  - free trials
  - https://ssl.comodo.com/free-ssl-certificate.php
  - https://www.freessl.com/
  - https://www.startssl.com/
  - recommended by rackspace
  - https://www.rapidssl.com/
  - https://www.thawte.com/
  - https://www.verisign.com/
  - generate CSR (cert signing request) 
  - http://www.rackspace.com/knowledge_center/article/generate-a-csr-with-openssl
    - useful info about domain fields
  - for somo.chem

cd /etc/ssl/certs/new # since we already have one
openssl genrsa -out somo.chem.utk.edu.key 2048
openssl req -new -sha256 -key somo.chem.utk.edu.key -out somo.chem.utk.edu.csr

  - for sassie-web.chem

cd /etc/ssl/certs
openssl genrsa -out sassie-web.chem.utk.edu.key 2048
openssl req -new -sha256 -key sassie-web.chem.utk.edu.key -out sassie-web.chem.utk.edu.csr

  - UTK details

US
Tennessee
Knoxville
University of Tennessee
Department of Chemistry
<redacted-email>     

From: Certificate Services Manager
Date: Fri, May 15, 2015 2:21 AM
To: Jones, Johnny C;

Subject:Enrollment Successful - Your SSL certificate for somo.chem.utk.edu is ready

Hello,

You have successfully enrolled for an InCommon SSL certificate.

You now need to complete the following steps:

    * Click the following link to download your SSL certificate (generally try to use a version that includes intermediates & root or your certificate may be rejected by some older clients)

    Format(s) most suitable for your server software:
       as X509 Certificate only, Base64 encoded: https://cert-manager.com/customer/InCommon/ssl?action=download&sslId=463737&format=x509CO
       as X509 Intermediates/root only, Base64 encoded: https://cert-manager.com/customer/InCommon/ssl?action=download&sslId=463737&format=x509IO
       as X509 Intermediates/root only Reverse, Base64 encoded: https://cert-manager.com/customer/InCommon/ssl?action=download&sslId=463737&format=x509IOR

    Other available formats:
       as PKCS#7 Base64 encoded: https://cert-manager.com/customer/InCommon/ssl?action=download&sslId=463737&format=base64
       as PKCS#7 Bin encoded: https://cert-manager.com/customer/InCommon/ssl?action=download&sslId=463737&format=bin
       as X509, Base64 encoded: https://cert-manager.com/customer/InCommon/ssl?action=download&sslId=463737&format=x509


    * Import your new certificate into your server (Please contact your administrator for help with this).

    * Your renew id: InyMu8t06y1ZgAXXBe8h

Certificate Details:
    Common Name :  somo.chem.utk.edu
    Subject Alternative Names :
    Number of licenses :
    SSL Type :     InCommon SSL (SHA-2)
    Term :         1095 Year(s)
    Server :       Apache/ModSSL
    Requested :    05/15/2015 06:17 GMT
    Approved :     05/15/2015 06:18 GMT
    Expires :      05/14/2018 23:59 GMT
    Order Number : 16685208
    Self-Enrollment Certificate ID : 463737
    Comments :

From: Certificate Services Manager
Date: Fri, May 15, 2015 2:21 AM
To: Jones, Johnny C;

Subject:Enrollment Successful - Your SSL certificate for sassie-web.chem.utk.edu is ready
Hello,

You have successfully enrolled for an InCommon SSL certificate.

You now need to complete the following steps:

    * Click the following link to download your SSL certificate (generally try to use a version that includes intermediates & root or your certificate may be rejected by some older clients)

    Format(s) most suitable for your server software:
       as X509 Certificate only, Base64 encoded: https://cert-manager.com/customer/InCommon/ssl?action=download&sslId=463738&format=x509CO
       as X509 Intermediates/root only, Base64 encoded: https://cert-manager.com/customer/InCommon/ssl?action=download&sslId=463738&format=x509IO
       as X509 Intermediates/root only Reverse, Base64 encoded: https://cert-manager.com/customer/InCommon/ssl?action=download&sslId=463738&format=x509IOR

    Other available formats:
       as PKCS#7 Base64 encoded: https://cert-manager.com/customer/InCommon/ssl?action=download&sslId=463738&format=base64
       as PKCS#7 Bin encoded: https://cert-manager.com/customer/InCommon/ssl?action=download&sslId=463738&format=bin
       as X509, Base64 encoded: https://cert-manager.com/customer/InCommon/ssl?action=download&sslId=463738&format=x509


    * Import your new certificate into your server (Please contact your administrator for help with this).

    * Your renew id: BG-L6M9crSst8-LtmBZ0

Certificate Details:
    Common Name :  sassie-web.chem.utk.edu
    Subject Alternative Names :
    Number of licenses :
    SSL Type :     InCommon SSL (SHA-2)
    Term :         1095 Year(s)
    Server :       Apache/ModSSL
    Requested :    05/15/2015 06:18 GMT
    Approved :     05/15/2015 06:18 GMT
    Expires :      05/14/2018 23:59 GMT
    Order Number : 16685210
    Self-Enrollment Certificate ID : 463738
    Comments :

- appconfig.json

  ,"messaging" : {
                  "wsport"     : 37777
                  ,"wssport"   : 443
                  ,"zmqhostip" : "127.0.0.1"
                  ,"zmqport"   : 37778
                  ,"udphostip" : "127.0.0.1"
                  ,"udpport"   : 37779
                 }

- httpd.conf
- e.g. diffs

diff httpd.conf.pressl httpd.conf
[root@slackgenapp] /etc/httpd $ diff httpd.conf.pressl httpd.conf
52a53
> Listen 443
143c144
< #LoadModule ssl_module lib64/httpd/modules/mod_ssl.so
---
> LoadModule ssl_module lib64/httpd/modules/mod_ssl.so
211a213,236
> ServerName 192.168.3.44:443
>
> <VirtualHost *:80>
>    ServerName 192.168.3.44
>    Redirect permanent / https://192.168.3.44/
> </VirtualHost>
>
> SSLCertificateFile /etc/ssl/certs/slackgenapp.crt
> SSLCertificateKeyFile /etc/ssl/certs/slackgenapp.key
> SSLPassPhraseDialog     builtin
> SSLRandomSeed           startup file:/dev/urandom 256
> SSLRandomSeed           connect builtin
> SSLCryptoDevice         builtin
> #SSLSessionCache         shmcb:/var/cache/mod_ssl/scache(512000)
> #SSLSessionCacheTimeout  300
> #SSLMutex                default
>
> <VirtualHost _default_:443>
>    ServerName 192.168.3.44
>    DocumentRoot "/srv/httpd/htdocs"
>    SSLEngine On
>
>    SSLEngine on
> </VirtualHost>
235d259
< DocumentRoot "/srv/httpd/htdocs"
540c564,568
< LoadModule php5_module        lib64/httpd/modules/libphp5.so
---
> #LoadModule php5_module        lib64/httpd/modules/libphp5.so
>
> #<IfModule proxy_module>
> #        LogLevel Debug
> #</IfModule>
541a570,572
> # for non ssl:
> #  ProxyPass /ws2 ws://localhost:37777/
> ProxyPass /wss2 ws://localhost:37777/

GenApp Wiki

Clone this wiki locally