Generate the Certificate Signing Request (CSR)

Log in to the sever. Root or sudo access is required.

# Change the following to your Customer ID ({CUSTOMER ID}) provided by PCR
NAME="{CUSTOMER ID}"

# Example
# NAME="pcr"

# Create the key and csr
sudo openssl req -new -newkey rsa:2048 -nodes \
    -keyout /etc/ssl/private/$NAME.key \
    -out /etc/ssl/private/$NAME.csr \
    -subj "/CN=*.$NAME.bypass/OU=Bypass/O=PCR/L=Grand Rapids/ST=Michigan/C=US" \
    -addext "subjectAltName = DNS:*.$NAME.bypass, DNS:$NAME.bypass, DNS:prod.$NAME.bypass, DNS:test.$NAME.bypass"
 
# display the csr contents
sudo cat /etc/ssl/private/$NAME.csr

The CSR will look like this:

Send the text of the CSR (or the file located in /etc/ssl/ to PCR.

PCR will send back a Certificate File (CRT).

Place the file in the /etc/ssl/certs/ directory.

Apache Config

The Virtual Hosts for PROD & TEST must be updated for the new Certificate and ServerAlias.

Locate the .conf files. These are located here:

/etc/apache2/sites-available (Ubuntu)
/etc/httpd/conf.d (RHEL / CentOS)

pcr360_prod.conf

<VirtualHost *:443>
    # The ServerName should be similar to the following:
    ServerName pcr360.{CUSTOMER ID}.pcr.com
    # Add the following. Make sure to update {CUSTOMER ID} with your Customer ID.
    ServerAlias prod.{CUSTOMER ID}.bypass

Locate the SSL Certificate directives within the same Virtual Host and update them to reflect the new Certificate files.

pcr360_prod.conf

<VirtualHost *:443>
    # ...
    SSLCertificateFile /etc/ssl/certs/{CUSTOMER ID}.crt
    SSLCertificateKeyFile /etc/ssl/private/{CUSTOMER ID}.key
    # ...

Once done, it should look similar to this:

pcr360_prod.conf

<VirtualHost *:443>
    # ...
    # SSL
    SSLEngine on
    SSLCertificateFile /etc/ssl/certs/pcr.crt
    SSLCertificateKeyFile /etc/ssl/private/pcr.key
    SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
    SSLCipherSuite HIGH:MEDIUM:!aNULL:+SHA1:+MD5:+HIGH:+MEDIUM
    SSLHonorCipherOrder on
    # ...

Update the Virtual Host for TEST. This is usually in pcr360_test.conf.

pcr360_test.conf

<VirtualHost *:443>
    # The ServerName should be similar to the following:
    ServerName pcr360-test.{CUSTOMER ID}.pcr.com
    # Add the following. Make sure to update {CUSTOMER ID} with your Customer ID.
    ServerAlias test.{CUSTOMER ID}.bypass

    # ...
    SSLCertificateFile /etc/ssl/certs/{CUSTOMER ID}.crt
    SSLCertificateKeyFile /etc/ssl/private/{CUSTOMER ID}.key
    # ...

Reload Apache:

systemctl reload apache2   # Ubuntu
systemctl reload httpd     # RHEL / CentOS

Browser not supported