Attention

Summary

What do you need to do?

Steps to install SSL Certificates

Install SSL Certificates - Windows

1. Download the certificate attached above.
2. Right-click ‘Start’ and select ‘Run’.
3. Type in ‘mmc’ and click ‘OK’.
4. On the ‘User Account Control’ screen click ‘Yes’.
5. Once ‘Microsoft Management Console’ opens click ‘File’ and select ‘Add/Remove Snap-in’.
6. In the left menu select ‘Certificates’ and click ‘Add’.
7. On the next screen click the radio button next to ‘Computer account’ and click ‘Next’.
8. Click ‘Finish’.
9. Once you are returned to the ‘Add or Remove Snap-ins’ screen click ‘OK’.
10. In the Microsoft Management Console’ window click on ‘Certificates (Local Computer)’.
11. Right-click on ‘Trusted Root Certificate Authorities’ in the left pane and select ‘All Tasks’ and then ‘Import’.
12. Click ‘Next’ in the ‘Certificate Import Wizard’.
13. Browse to where you saved the Securly certificate and select it. Then click ‘Open’.
14. On the Certificate Store window ensure that it says ‘Trusted Root Certificate Authorities’ and click ‘Next’.
15. Click ‘Finish’ and then 'OK'
16. You should see the Securly certificate showing in the certificates folder at this point.

Install SSL Certificates - OSX

1. Download the MetaPack certificate *.pem file from above
2. Navigate to Finder > Applications > Utilities > Keychain Access
3. Select ‘System’ in the left-hand column.
4. Open ‘File > Import Items’ and import the certificate files into the ‘System’ keychain.

Import the SSL cert into the Java cacerts Keystore - Linux

1. Download the MetaPack certificate *.cer file from above
2. Run following command: keytool -import -alias metapack -file star_metapack_net.cer -keystore exampleraystore

Testing new cert in a test environment

Windows:

[ Test IP - returned from above ] HOSTNAME - this will be the hostname used to connect to Metapack

Example:
23.201.224.24 customer-delta.metapack.com



Save the file.

Using a web browser, browse to the HOSTNAME entered into the hosts file with https://

Example: https://customer-delta.metapack.com

In the address bar click on the padlock -> Connection is Secure -> Certificate is Validated
Check the dates under 'Validity Period' and ensure the 'Expires on' date has updated to June 18 2025.
Validity Period
   Issued On Friday 17 May 2024 at 01:00:00
   Expires On Wednesday 18 June 2025 at 00:59:59 GMT

This screenshot is only an example, the date won't reflect that updated certificate.



Linux:

Getting the IP to use in the hosts file for testing.


dig wildcard.metapack.net.edgekey-staging.net +short

Output example:

e3323.b.akamaiedge-staging.net.
23.47.41.68

Edit the hosts file: /etc/hosts

[ Test IP - returned from above ] HOSTNAME - this will be the hostname used to connect to Metapack

Example:
23.47.41.68 dm.metapack.com

Save the file.

Note: Replace 'ENTER HOSTNAME HERE' with the hostname entered into your hosts file in the previous step.

Using the following openssl command you can check the certifcates vadility date

openssl s_client -showcerts -servername 'ENTER HOSTNAME HERE' -connect 'ENTER HOSTNAME HERE':443 <<< "Q"| openssl x509 -text | grep -iA2 "Validity"
Example:
openssl s_client -showcerts -servername dm.metapack.com -connect dm.metapack.com:443 <<< "Q"| openssl x509 -text | grep -iA2 "Validity"

Output (example)

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
verify return:1
depth=1 C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1
verify return:1
depth=0 C = US, ST = Texas, L = Austin, O = Auctane LLC, CN = *.metapack.net
verify return:1
DONE
    Validity
       Not Before: Jun 30 00:00:00 2023 GMT
       Not After : Jun 29 23:59:59 2024 GMT