Installing Global Server IDs on the Red Hat Apache/SSL Server

You'll need to take a few extra steps to get your Global Server ID (GSID) working with your Red Hat Linux Apache/SSL Server.

What you'll need to do:

  1. Obtain a GSID from VeriSign. Note that the Red Hat Linux Apache/SSL Installation Guide provides instructions to help you purchase a signed certificate from VeriSign.

  2. Install the Intermediate CA Certificate.

    Click on the Intermediate CA link on the left. You'll see a page containing the PEM-encoded form of VeriSign's Intermediate CA Certificate.

    Cut and paste the entire text of the certificate, including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines, into a file named /etc/httpd/conf/ssl.crt/gsid.crt. Be careful not to include any leading or trailing whitespace before the beginning and ending hyphens.

    Add the following directive to your /etc/httpd/conf/httpd.conf file, within the virtual host tags that define your secure Web server and with the other SSL directives:

    SSLCACertificateFile /etc/httpd/conf/ssl.crt/gsid.crt

  3. Save the GSID in the default certificate location: /etc/httpd/conf/ssl.crt/server.crt. Restart your secure Web server, according to the instructions provided in the manual. You are now using your Global Server ID.

  4. GSIDs will not work with older versions of Netscape and Microsoft browsers, so your customers may need to upgrade their browsers.

    GSIDs will work with the following browsers:

    If your users are using Microsoft Internet Explorer 3.02 on Windows 95, they will need to install a special, free patch (English Exportable SGC Add-On for IE 3.02), available at http://microsoft.com/msdownload/ieplatform/iewin95/05000.htm.

    If your users are using Netscape Navigator 3.0, they will only be able to connect to your site at 40 bit encryption levels. Navigator prior to 3.0 or Internet Explorer prior to 3.02 will not work with GSIDs. Please let your customers know about this issue if you install a GSID.