This procedure describes how to locate the certificates and find the certs directory. This is used for both self-signed digital certificates andtrusted internal CA certificates.
Verify the Open SSL Version
Verify the Open SSLversion.
For information about the latest stable version and vulnerabilities, see www.openssl.org.
-
Run the following command:
openssl versionThe version number is returned. For example:
OpenSSL 1.0.1a 15 Oct 2015
Find the path to the trusted certificates
- Run the following command:
$
openssl version -dThe resulting output is the the OpenSSL certificate path for your operating system.
For example:
OPENSSLDIR: "/var/ssl"(AIX)OPENSSLDIR: "/etc/ssl"(SLES)OPENSSLDIR: "/usr/lib/ssl"(Ubuntu)
-
Verify the directory "certs" exists by using the list directory command:
ls - If there is no
certsdirectory, create it by running the command:mkdir certs - Navigate to the
certdirectory in the located path by running the command:cd certs
The next step in configuring the Unix/Linux Agent to use SSL, is to install a Self-Signed Digital Certificate or Trusted Internal CA Certificate.
