Changes

Jump to navigation Jump to search
60 bytes added ,  16:42, 1 April 2016
Line 7: Line 7:  
#:<source lang="bash">openssl req -new -key server.key -out server.csr</source> (YOUR name must be the fully qualified domain name ej: wiki.herrerosolis.com)
 
#:<source lang="bash">openssl req -new -key server.key -out server.csr</source> (YOUR name must be the fully qualified domain name ej: wiki.herrerosolis.com)
 
# Remove passphrase from key
 
# Remove passphrase from key
#:<source lang="bash">cp server.key server.key.org && openssl rsa -in server.key.org -out server.key</source>-rw-r--r-- 1 root ssl-cert 891 Jun 29 13:22 server.key
+
#:<source lang="bash">cp server.key server.key.org && openssl rsa -in server.key.org -out server.key</source>-rw-r----- 1 root ssl-cert 891 Jun 29 13:22 server.key<br />-rw-r--r-- 1 root ssl-cert 891 Jun 29 13:22 server.crt
 
# Generate Self-Signed Certificate
 
# Generate Self-Signed Certificate
 
#:<source lang="bash">openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt</source>will generate a temporary certificate which is good for 365 days
 
#:<source lang="bash">openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt</source>will generate a temporary certificate which is good for 365 days
 
# Installing the Private Key and Certificate
 
# Installing the Private Key and Certificate
 
#* Apache:
 
#* Apache:
## Copy server.crt and server.key to apache conf ssl path chmod 600 to .key and 644 to .crt
+
## Copy server.crt and server.key to apache conf ssl path chmod 640 to .key and 644 to .crt
 
##:<pre>
 
##:<pre>
 
##:: cp server.crt /usr/local/apache/conf/ssl.crt # ALTERNATIVE: /etc/ssl/certs
 
##:: cp server.crt /usr/local/apache/conf/ssl.crt # ALTERNATIVE: /etc/ssl/certs

Navigation menu