SSL Certificate Updation - Onsite Clients

SSL Certificate Updation - Onsite Clients

This KB was generated with Volante Technologies in mind as the client has a minor difference in how they update these certificates on their side (Azure Front Door). The certificate validity shows correctly when checking on the browser, however, on the server side we need to update the new certificates manually. If this is not done their system becomes inaccessible which opposes the usual SSL Certificate expiry scenarios. Follow the below steps to resolve the issue:

  1. Get the Certificate File, Key File and Chain File from the client.
  2. Add the above files in the appropriate locations:
    1. SSLCertificateFile / SSLCertificateChainFile - /etc/ssl/certs/<file_name.crt> (grant 644 permission)
    2. SSLCertificateKeyFile - /etc/ssl/private/<file_name.key> (grant 600 permission)
  3. Update the Apache Host Config file.
    1. Add the new directory paths to the above files on /etc/apache2/sites-enabled/orangehrm.conf
  4. Reload Apache Services.
  5. Access the Frontend and confirm Login and Menu Loading
You can use the below tool to verify the validity of the Certificate Files
https://www.sslshopper.com/certificate-decoder.html

You can check the Apache logs using:
tail -f /var/log/apache2/error.log


    • Related Articles

    • On-Site Client Automated Backup Script

      Requirement: Onsite clients may request for automated backup scripts to be deployed on their servers for daily backups. Use: Deploy the below script on the clients server along with a specific cron-task setup for backups to be taken on a pre-defined ...

    • Enabling DOCX Resume Previewing Function on Recruitment Module

      On-Site Clients on older Versions (below 7.x) reported having trouble previewing Resumes/CV's on the Recruitment Module where the Candidate has uploaded them as a DOCX or any other format other than PDF. The solution for this issue was to install two ...

    • Guide To Add Logo To OTM Certificate

      Guide To Add Logos To OTM Certificate. Step 01: First convert the image(logo) to base64 format using the below url https://codebeautify.org/image-to-base64-converter It will generate a large string value as above. Step 02: Write the update query to ...

    • Client call scheduling etiquette

      It is required to adhere to the below options when scheduling meetings/sessions with your clients and stakeholders. This is not optional.  If it’s a meeting with one person, Calendar them for a particular time that suits you and email them and tell ...