Update HTTPS Certificate with Globaleaks (Admin):

Table of Content:

About

This document shows you how to update the HTTPS certificate with Whistleblower.

PfSense:

  1. Log into PfSense.
    ![[SH_pfsense_updateHTTPScertificatewgloballeaks_AD-1.PNG]]

  2. Click on System and Certificates. Click Certificates again.
    !57aa.png
    !58aa.png

  3. Scroll all the way down to the bottom of the page and find Add/Sign and click it.
    !59aa.png

  4. Fill the information like this picture. Slick Save. Then Yes.
    !60aa.png

  5. Scroll all the way down to the bottom of the page again and find The one you just made and click the Export Key button to download the certificate. Then click the Authorities button and scroll down and look for CompanyCertificate. Click the Export CA button to download the certificate.
    !61aa.png
    !62aa.png
    !63aa.png

Globaleaks:

  1. Go to Globaleaks.
  2. Log in.
!! IMPORTANT !!

This website requires patients and a lot of reloading. If things are slow, reload.

  1. Go to Network and make sure you are in the HTTPS tab and click Reset.
    Reload.
    !64aa.png
    !65aa.png
    !66aa.png
!! IMPORTANT !!

The order of uploads are important in this case. Make sure to follow the steps.

  1. Look for Private Key and click Upload. This must be the first upload to be done!
    Then choose the Globaleaks.key and click Open.
    !67aa.png
    !68aa.png

  2. Then upload to the Certificate (PEM) second.
    Then choose the Globaleaks.crt and click Open.
    !69aa.png
    !70aa.png

  3. Then upload to the Intermediate Certificates (PEM) third.
    Then choose the Company.crt and click Open.
    !71aa.png
    !72aa.png

  4. It should look like the picture. Then click Enable. Wait 1 minute then reload.
    !73aa.png

  5. Then click the ‘Not secure' tab and check if the certificate is valid. You can also click it an confirm, like seen in picture number 2. Another way to confirm it is to copy the URL into a new tab and click enter. The 'Not Secure’ warning should be gone.
    !74aa.png
    !75aa.png

And you are done. 😄

Continue here:
Change Hostname after Certificate Update
See you again next year!