Renewed SSL certificates for 2025/6

• Renewed SSL certificates available for download on Fasthosts account
  • Download “Certificate” and rename → signed.crt
  • Download both “Intermediate Certificates”
    • not sure why there are 2 intermediate certificates
    • rename one as ca.pem
    • renmame other as ca.pem.temp
• Use WinSCP to copy the 3 certificates to the Yaddnet VPS
• Log on to yaddnet vps via SSH
  • copy existing certificates in /usr/local/ssl from
    • signed.crt → signed.crt.old
    • ca.pem → ca.pem.old
  • copy new certificates from home directory to /usr/local/ssl
  • for clarity this gives new files
    • /usr/local/ssl/signed.crt
    • /usr/local/ssl/ca.pem
    • /usr/local/ssl/ca.pem.temp
  • Restart Apache
    • service apache2 restart
  • browse to https://www.yaddnet.org/index.php?
  • site loads correctly
    • check site security

• swap ca.pem files (ca.pem → ca.pem.temp and ca.pem.temp → ca.pem by whatever means)
• Restart Apache
• browse to https://www.yaddnet.org/index.php?
• site loads correctly
• security also valid

— John Pumford-Green 15/03/25 06:36 GMT