Forum

Since it seem to take me a while to remember / figure out how to correctly create the X.509 SSL/TLS certificate for Hiawatha, and others might find it useful, do I post the steps here. The file names reflect that I use ssl.com to get the certificate...since letsencrypt is not yet fully operational.

Generate .csr and .pem file:

openssl req -out mydomain.com.csr -new -sha384 -newkey rsa:4096 -nodes -keyout serverkey.pem

Add the different files to the certificate file:

echo "" >> serverkey.pem
cat mydomain.com.csr >> serverkey.pem
echo "" >> serverkey.pem

cat STAR_mydomain.com.crt >> serverkey.pem
echo "" >> serverkey.pem

cat SSLcomDVCA_2.crt >> serverkey.pem
echo "" >> serverkey.pem

cat USERTrustRSAAddTrustCA.crt >> serverkey.pem
echo "" >> serverkey.pem

Thanks for the info!