LincDoc requires the use of SSL certificates in order to ensure the security of data being transferred between web browsers and the server back end. The process begins by logging in to LWSA (using the web portal, and not through the system console), and generating a certificate signing request (CSR).
Open a browser and log in to LWSA.
Click the SSL Certificate Signing Requests tab.
Click the create button.
The Create new certificate signing request dialog box appears. Populate all of the fields as needed for your organization. For the signature algorithm, just use the default value if you are not sure.
Click generate CSR.
Click SAVE.
Cilck show CSR, and copy the displayed information (CTRL-C).
Paste the CSR into your SSL provider's application form, and proceed through their application process. The certificate must be compatible with the Apache web server running on Linux. Refer to your SSL provider to confirm this fact.
At this point, your SSL provider should have provided you with the SSL certificate; open it in notepad and copy it.
Return to LWSA, and click the SSL Certificate Signing Requests tab.
From the displayed list, select your original CSR.
Paste the SSL certificate into the text box set SSL certificate for this CSR. Optional: paste one or more CA certificates (in any order) into the text box set CA certificate chain/bundle for the above SSL cert. Refer to your SSL provider for details. Note: sometimes these CA certificate(s) are referred to as a "chain" or "bundle" file.
Click SAVE.
Click the Application Contexts tab.
Click edit settings for Apache virtual hosts.
Verify that the uses SSL? checkbox is selected.
Click apply SSL cert from CSR, and select the appropriate CSR.
When complete, your dialog box should appear similar to the following example. Note: custom Apache VirtualHost statements and link to existing VirtualHost? are advanced options and should only be used under guidance from LincWare staff.
As the example above demonstrates, verify the following:
The enabled check box is selected.
A single asterisk ( * ) is used in the virtual host IP address text box.
The port number is set to 443.
The add "Listen" directive for port? check box is NOT checked.
Click check configuration to verify that your settings are configured correctly.
Close the Apache virtual hosts dialog, and click SAVE.
Go to the services tab.
Click the appropriate button to restart Apache.
Open a browser and navigate to the following URL: https://yourLincDocSystem/lincdoc/ You should see a login page, and no warnings about a browser security issue. The SSL certificate is now installed and working properly.
Using a self signed SSL certificate
Follow the above steps beginning from #14, but in step #17 instead of clicking apply SSL cert from CSR, use create test SSL certificate. This certificate is for testing only, and is not supported in production environments in any way.