{"id":42180,"date":"2021-02-15T15:28:59","date_gmt":"2021-02-15T14:28:59","guid":{"rendered":"\/calcolo\/?page_id=42180"},"modified":"2025-09-18T14:08:05","modified_gmt":"2025-09-18T12:08:05","slug":"digital-certificates","status":"publish","type":"page","link":"\/calcolo\/en\/digital-certificates\/","title":{"rendered":"Digital certificates"},"content":{"rendered":"\n<p style=\"text-align: center\"><span style=\"font-family: Open Sans;font-size: 21px;color: #007bb3\">Digital certificates<\/span><\/p>\n<hr \/>\n<p><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\"><span style=\"font-size: 18px\"><strong>Certificates protection<\/strong><\/span> <\/span><\/p>\n<ul>\n<li><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\">Private keys must be properly protected (chmod 400 for Linux systems) <\/span><\/li>\n<li><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\">Private keys must not be stored on media accessible via network (for example via AFS or NFS) <\/span><\/li>\n<li><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\">T<\/span><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\">he personal certificate must be protected by a password of appropriate length (minimum 12 characters). <\/span><\/li>\n<\/ul>\n<p><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\"> <br \/>\u00a0<\/span><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\"><strong><span style=\"font-size: 18px\">Server certificates<\/span><\/strong> <\/span><\/p>\n<p><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\">Send the request email with the following characteristics: <\/span><\/p>\n<ul>\n<li><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\"><span style=\"color: #007bb3\">to<\/span>: ra &lt;AT&gt; bo.infn.it (local RA &#8211; DRAO) <\/span><\/li>\n<li><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\"><span style=\"color: #007bb3\">Subject<\/span>: Server certificate request for xxxx.bo.infn.it <\/span><\/li>\n<li><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\"><span style=\"color: #007bb3\">Attach<\/span>: <strong>server.csr<\/strong> (attach the server.csr file) (below you will find the procedure to generate the server.csr file) <\/span><\/li>\n<li><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\"><span style=\"color: #007bb3\">Body<\/span>: Specify the server name, any aliases <\/span><\/li>\n<li><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\">the mail must be <strong>digitally signed <\/strong><\/span><\/li>\n<\/ul>\n<p><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\">Subsequently, after the local RA has submitted the request, you will receive an email with instructions to download the certificate. <\/span><\/p>\n<p><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\"><strong><span style=\"font-size: 18px\">Procedure for generating server certificate request<\/span><\/strong> <\/span><\/p>\n<p><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\">For the generation of the certificate request and the private key\u00a0 you can follow the instructions published on the national wiki: <\/span><\/p>\n<p><span lang=\"en\" style=\"font-family: Open Sans;font-size: 16px\"><a href=\"https:\/\/wiki.infn.it\/cn\/ccr\/x509\/home\/utenti\/server\" target=\"_blank\" rel=\"noopener nofollow external noreferrer\" data-wpel-link=\"external\" title=\"Open page in new tab How to request a Server certificate\">How to request a Server certificate<\/a> (italian only)<\/span><\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Digital certificates Certificates protection Private keys must be properly protected (chmod 400 for Linux systems) Private keys must not be stored on media accessible via network (for example via AFS or NFS) The personal certificate must be protected by a password of appropriate length (minimum 12 characters). \u00a0Server certificates Send the request email with the [&hellip;]<\/p>\n","protected":false},"author":13,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"template-page-builder-no-sidebar.php","meta":{"_lmt_disableupdate":"no","_lmt_disable":"","footnotes":""},"class_list":["post-42180","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"\/calcolo\/wp-json\/wp\/v2\/pages\/42180","targetHints":{"allow":["GET"]}}],"collection":[{"href":"\/calcolo\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"\/calcolo\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"\/calcolo\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"\/calcolo\/wp-json\/wp\/v2\/comments?post=42180"}],"version-history":[{"count":19,"href":"\/calcolo\/wp-json\/wp\/v2\/pages\/42180\/revisions"}],"predecessor-version":[{"id":44864,"href":"\/calcolo\/wp-json\/wp\/v2\/pages\/42180\/revisions\/44864"}],"wp:attachment":[{"href":"\/calcolo\/wp-json\/wp\/v2\/media?parent=42180"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}