Thread View: adobe.creative.suite.versioncue.mac
2 messages
2 total messages
Started by Doug_Smart
Fri, 20 Feb 2009 16:17
How to enable and install an SSL certificate on version cue CS4
Author: Doug_Smart
Date: Fri, 20 Feb 2009 16:17
Date: Fri, 20 Feb 2009 16:17
49 lines
2977 bytes
2977 bytes
Your mileage may vary, but since it is not a completely straightforward process I thought I would share some very straightforward instructions for how to turn on SSL if you so desire.
These are the steps that I used to install a certificate on Version Cue CS4. All of these commands were done from terminal on a Mac running leopard. But the same commands should work if you install openSSL on Windows.
Create private key in PEM format without encryption
openssl rsa \-in openssl_key.pem \-inform pem \-out openssl_key.der \-outform
derwriting RSA key
Generate CSR (certificate signing request) to submit to an online certificate authority such
as Verisign or Thawte or to be signed by an internal certificate authority such as
Microsoft certificate server.
openssl req \-out orca.csr \-key openssl_key.pem \-new
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:US
State or Province Name (full name) [Some-State]:STATE NAME SPELLED OUT WITHOUT ABBREVIATIONS
Locality Name (eg, city) []: ENTER CITY NAME
Organization Name (eg, company) [Internet Widgits Pty Ltd]: ENTER COMPANY NAME
Organizational Unit Name (eg, section) []: ENTER DEPARTMENT (OPTIONAL)
Common Name (eg, YOUR name) []: ENTER FQDN (eg: server.example.com)
Email Address []:ENTER E-MAIL ADDRESS
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []: LEAVE BLANK
An optional company name []: LEAVE BLANK
Use the CSR file that is generated and submit it to a certificate authority. I used my Microsoft certificate server CA and downloaded a BASE64 encoded DER. That is the first file you need to import into version cue.
Convert private key to PKCS#8 format without encryption to import into Version Cue CS4. This is the private key in the appropriate format to use in version cue.
openssl pkcs8 \-topk8 \-in openssl_key.pem \-inform pem \-out openssl_key_pk8.pem \-outform pem \-nocrypt
Re: How to enable and install an SSL certificate on version cue CS4
Author: Doug_Smart
Date: Wed, 01 Apr 2009 19:29
Date: Wed, 01 Apr 2009 19:29
51 lines
2580 bytes
2580 bytes
Found an error in my instructions above. These have been corrected below:
1. Create Initial Certificate File in PEM Format
openssl genrsa -out openssl_key.pem 1024
2. Create private key in PEM format without encryption
openssl rsa -in openssl_key.pem -inform pem -out openssl_key.der -outform
der
3. Generate CSR (certificate signing request) to submit to an online certificate authority
such as Verisign or Thawte or to be signed by an internal certificate authority such
as Microsoft certificate server.*
openssl req -out VCServerName.csr -key openssl_key.pem -new
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:US
State or Province Name (full name) [Some-State]:STATE NAME SPELLED OUT WITHOUT ABBREVIATIONS
Locality Name (eg, city) []: ENTER CITY NAME
Organization Name (eg, company) [Internet Widgits Pty Ltd]: ENTER COMPANY NAME
Organizational Unit Name (eg, section) []: ENTER DEPARTMENT (OPTIONAL)
Common Name (eg, YOUR name) []: ENTER FQDN (eg: server.example.com)
Email Address []:ENTER E-MAIL ADDRESS
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []: LEAVE BLANK
An optional company name []: LEAVE BLANK
4. Submit CSR file to online CA or inhouse CA. I used Microsoft Certificate Server. The returned DER encoded file is the one to import into Version Cue first.
5. Convert private key to PKCS#8 format without encryption to import into Version Cue CS4
openssl pkcs8 -topk8 -in openssl_key.pem -inform pem -out openssl_key_pk8.pem -outform pem -nocrypt
Thread Navigation
This is a paginated view of messages in the thread with full content displayed inline.
Messages are displayed in chronological order, with the original post highlighted in green.
Use pagination controls to navigate through all messages in large threads.
Back to All Threads