1. Home
  2. SSL Certificates
  3. Installing a True Business ID with EV on a cPanel Mail server

Installing a True Business ID with EV on a cPanel Mail server

To install your True Business ID with EV on a CPanel Mail Server, perform the following steps:

Step 1: Obtain the GeoTrust SSL Extended Validation Root CA Certificate Bundle

a) Download the GeoTrust EV CA bundle from the following solution: AR1425

Be sure to use Vi or Notepad as word processing programs like Microsoft Notepad may add additional characters that may render the certificate unusable.

b) Copy and paste the GeoTrust EV CA bundle into a text file and save as “intermediate.pem“.

Step 2: Download your certificate

  1. Download your certificate as per the instruction on the following solution: SO15168
  2. Save the certificate file with a .pem extension. For example: cert.pem

Step3. Install your certificate

First you need to import the Thawte root certificate into your server. You can obtain the root certificate from the following link: https://www.geotrust.com/resources/root-certificates/index.html

  1. Copy the Thawte root certificate into a text editor such as notepad and save as root.pem.
  2. Create a new file (yourcert.pem) consisting of your private key and your certificate file:
    -----BEGIN RSA PRIVATE KEY-----
    [encoded key]
    -----END RSA PRIVATE KEY-----
    [empty line]
    -----BEGIN CERTIFICATE-----
    [encoded certificate]
    -----END CERTIFICATE-----
    [empty line]
    
  3. Save the file as yourcert.pem in the /etc/ssl/certs/ directory.
  4. Copy the root.pem file to the /etc/ssl/certs/ directory.
  5. Copy the intermediate.pem file to the /etc/ssl/certs/ directory.
  6. When you are setting up the SSL support you will need to access the stunnel configuration file which will probably be available at etc/stunnel/default/stunnel.conf.
  7. Open the stunnel.conf and locate the following directives (they may be commented out by #). It may be necessary to add the above directives if they are not present.
    verify=3
    CAfile=/etc/ssl/certs/root.pem
    CAfile=/etc/ssl/certs/intermediate.pem
    cert=/etc/ssl/certs/yourcert.pem

     

  8. Restart your web / mail service for the installation to be completed. In some instances, it may be necessary to physically restart the actual machine.

 

Updated on March 26, 2017

Was this article helpful?

Related Articles

Add A Comment