Creating a SSL certificate

dennylin93 · #1 January 1st, 2009, 12:41

Right now I'm having trouble creating a SSL certificate and enabling it on Apache. I've seen a lot of tutorials, but none of them seem to work.

Wondering if anyone could provide me with instructions on how to create a SSL certificate and modify the Apache configuration file. Thanks in advance.

felix · #2 January 1st, 2009, 13:23

Edit /usr/local/etc/apache22/httpd.conf file:

Code:

#    Uncomment:
#    Include etc/apache22/extra/httpd-ssl.conf

Edit /usr/local/etc/apache22/extra/httpd-ssl.conf:

Code:

#    Uncomment and change to your domain name:
#    ServerName www.my_domain.org:443

#    Uncomment and change to your mail address:
#    ServerAdmin webmaster@my_domain.org

And run:

Code:

cd /usr/local/etc/apache22
openssl genrsa -des3 -out server.key 1024
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt
chmod 0400 /usr/local/etc/apache22/server.key
chmod 0400 /usr/local/etc/apache22/server.crt

cd /usr/local/etc/apache22
cp server.key server.key.orig
openssl rsa -in server.key.orig -out server.key

Restart Apache...

morganw · #3 January 1st, 2009, 23:27

If you have trouble with the "openssl" program, look into /usr/ports/security/xca. I use it to manage all of the certificates for my WPA2 setup, and it's infinitely more useable than the basic "openssl" program.

dennylin93 · #4 January 2nd, 2009, 13:14

Thanks for the replies. Do I need to modify openssl.cnf in order to generate the certificate?

gilinko · #5 January 2nd, 2009, 17:05

openssl.cnf can be used to quickly add information that is requested by the above commands, BUT it's not necessary. The commands will ask you for the required information, and they are pretty easy to understand.

When asked for "YOUR name" in these dialogs you enter the full domain name(ie www.example.com or subdomain.example.com), and not your name. Can be confusing, but that's pretty much the only thing that isn't pretty clear in the dialogues.

ruaoh · #6 May 13th, 2010, 17:26

I followed these steps to create my own cert.

http://www.akadia.com/services/ssh_t...rtificate.html

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
creating user from a webpage	floydk	Web & Network Services	8	March 22nd, 2009 16:32
Problem creating patch file	roddierod	Porting New Software	5	January 1st, 2009 02:15
Creating CD's	dpalme	Installing & Upgrading	5	November 24th, 2008 05:47
Creating Audio CD "image" files	wiscodisco	Multimedia	4	November 19th, 2008 17:39

The Following 2 Users Say Thank You to felix For This Useful Post:
MNIHKLOM (January 29th, 2013), paulfrottawa (January 2nd, 2011)

The Following User Says Thank You to gilinko For This Useful Post:
MNIHKLOM (January 29th, 2013)