Cisco Headend Digital Broadband Delivery System
Deploying SSL Certificates Signed by an External CA
4034689 Rev A
101
Verify the Running Status of the http Web Server Instance
Complete the following steps to verify that the web server instances are running
properly.
properly.
Note: Both web instances are checked even if you configured only one instance to
support the web UI and the web services.
1
support the web UI and the web services.
1
Type the following command and press Enter to verify the configuration and to
enable HTTP-S.
enable HTTP-S.
/
etc/apache2/gen_crt_dncs
Result: Output should look similar to the following:
Prepare SSL certificate for HTTPS service. HTTPS will not be
supported on
supported on
this host without an SSL certificate in place. Choose from
following options:
following options:
1. Generate a self-signed SSL certificate and deploy now. You
will need to
will need to
manually deploy the certificate to those clients connecting to
this server.
this server.
2. Generate a certificate signing request for the server
certificate and
certificate and
proceed. No SSL certificate will be deployed, you will need to
sign the
sign the
generated CSR file externally and manually deploy it.
3. Import a server certificate for use by openssl and apache.
4. Check dependencies and enable apache SSL.
5. Exit - Skip this step now and manually deploy SSL
certificate later.
certificate later.
Refer to the system User's Guide for instructions.
Please enter your choice: [1|2|3|4|5]
2 Select choice 4 and press Enter.
3 Type the following command and press Enter.
3 Type the following command and press Enter.
ps -ef | grep httpd
Example: Output should look similar to the following example:
root 21610 1 0 14:10:09 ? 0:00
/usr/apache2/bin/httpd -k start -DSSL
/usr/apache2/bin/httpd -k start -DSSL
dncs 21614 21610 0 14:10:10 ? 0:00
/usr/apache2/bin/httpd -k start -DSSL
/usr/apache2/bin/httpd -k start -DSSL
dncs 21615 21610 0 14:10:10 ? 0:00
/usr/apache2/bin/httpd -k start -DSSL
/usr/apache2/bin/httpd -k start -DSSL
nobody 21594 21589 0 14:09:59 ? 0:00
/usr/apache2/bin/httpd -f /etc/apache2/httpd-dncsws/httpd.conf
-k start -DSSL
/usr/apache2/bin/httpd -f /etc/apache2/httpd-dncsws/httpd.conf
-k start -DSSL