Install GoDaddy SSL Certificate on Cisco ASA with openssl

Install GoDaddy SSL Certificate on Cisco ASA 


1) Download the gd_intermediate.crt certificate https://certs.godaddy.com/anonymous/repository.pki

GoDaddy Secure Server Certificate (Intermediate Certificate)

gd_intermediate.crt (pem)


09 ED 6E 99 1F C3 27 3D 8F EA 31 7D 33 9C 02 04 18 61 97 35 49 CF A6 E1 55 8F 41 1F 11 21 1A A3

2) ASDM: Configuration, Device Management, Certificate Management, CA Certificates Click Add & Select the file “gd_intermediate.crt” that you downloaded and then click Add Certificate

godaddy2

 3) Create PKCS12 format file

openssl pkcs12 -export -in your-domain.com-from-GD.cer -inkey privateKey.key -out asa-your-domain-certificate.pfx -certfile gdig2-CACert-bundle-from-GD.cer
 
Enter Export Password: (put pfx password)
Verifying - Enter Export Password: (put pfx password)


4) ASDM: Configuration, Device Management, Certificate Management, Identity Certificates Click Browse and select your PFX file that you saved in step 3, type the pfx password you created and then click Add Certificate
Identity_Certificate

5) ASDM: Device Management, Advanced, SSL Settings Select the interface under the “Certificates” section that you want to have the certificate set on and then click Edit Pick the certificate from the “Primary Enrolled Certificate” drop down.
 


6) Save ASDM configuration.





found at https://chrisquast.wordpress.com/2014/01/13/cisco-asa-godaddy-ssl-certificate/

Comments

Post a Comment

Popular posts from this blog

Securing the Pi-hole with fail2ban to prevent DNS Amplification attacks

Securing the Pi-hole with fail2ban to prevent DNS Amplification attacks   1. Install fail2ban  sudo apt-get update ; sudo apt-get install fail2ban 2. create jail file vi /etc/fail2ban/jail.d/pihole-dns.conf [pihole-dns] enabled = true port     = 53 action   = %(banaction)s[name=%(__name__)s-tcp, port="%(port)s", protocol="tcp", chain="%(chain)s", actname=%(banaction)s-tcp]            %(banaction)s[name=%(__name__)s-udp, port="%(port)s", protocol="udp", chain="%(chain)s", actname=%(banaction)s-udp] logpath = /var/log/pihole.log findtime = 60 maxretry = 5 bantime = 3600   3. create filter file vi /etc/fail2ban/filter.d/pihole-dns.conf # Fail2Ban configuration file # # script from www.marek.tokyo # [INCLUDES] # Read common prefixes. If any customizations available -- read them from # common.local before = common.conf [Definition] _daemon = dnsmasq #...
Read more

Reduce (shrink) and resize raw disk at Proxmox

 Reduce (shrink) and resize raw disk at Proxmox 1. Check the status of raw disk:   #e2fsck -fy /hdd-img/images/111/vm-111-disk-1.raw e2fsck 1.46.5 (30-Dec-2021) Pass 1: Checking inodes, blocks, and sizes Pass 2: Checking directory structure Pass 3: Checking directory connectivity Pass 4: Checking reference counts Pass 5: Checking group summary information /hdd-img/images/111/vm-111-disk-1.raw: 135279/327680000 files (1.8% non-contiguous), 857599886/1310720000 blocks  2. At first, check raw disk size:   #qemu-img info /hdd-img/images/111/vm-111-disk-1.raw image: /hdd-img/images/111/vm-111-disk-1.raw file format: raw virtual size: 4.88 TiB (5368709120000 bytes) disk size: 3.59 TiB  3. Resize filesystem: -M - will resize to the minimum size based on saved files -p - will display progress bar #resize2fs -M -p /hdd-img/images/111/vm-111-disk-1.raw resize2fs 1.46.5 (30-Dec-2021) Resizing the filesystem on /hdd-img/images/111/vm-111-disk-1.raw to 852166716 (4k) blocks....
Read more

How to clone CentOS server to another one

Image
 How to clone CentOS server to another one   Step 1: Installing the Rsync Tool in CentOS For cloning to be successful the rsync command-line tool needs to be present on both servers. This will be used for mirroring the source server to the destination server and syncing all the differences between the two systems. Thankfully, modern systems come with rsync already pre-installed. To check the version of rsync installed run: $ rsync --version If you want to view additional information about rsync, execute the following rpm command : $ rpm -qi rsync Check Rsync Version in CentOS If rsync is missing, run the following command to install it in RHEL / CentOS / Fedora systems. $ sudo yum install rsync Step 2: Configure the Source Server There are directories and files that you may want to exclude from cloning because they are either already available in the destination server or are autogenerated. These include the /boot , /tmp and /dev directories. Therefor...
Read more