Technology blogs
Mar 08

for everybody who is just starting to learn about the SSL оpportunities that you have with Open SSL (tool) and the mod_ssl for Apache for securing your site. The simplest and fastest thing that you can do is to create a self-signed certificate, after you generate a free RSA key :) . Don’t worry it’s not so sophisticated as it sounds :) actually it’s pretty easy. You can read more on the link below
ssl graph

Securing an Apache 2 Web server can be an intimidating prospect for those new to secure sockets layer (SSL) certificates. However, this need not be the case. SSL secures Web server to Web browser connections. Read on to better understand SSL certificates, learn how to set them up on Apache and launch your SSL-enabled site.

basically i will save you some of reading the long tutorial and will get straight to the point – here are some useful commands that you are going to learn from this tutorial. I had some problem with these commands under windows so i give you my updated version – everything should be ok here :)

i tested that with win7 and xampp 1.7 :)

create RSA private key
openssl genrsa -out mykey.pem 1024

create self-signed certificate
openssl req -config “xammp-dir\apache\bin\openssl.cnf” -new -key my.key -x509 -out sslname.crt

create certificate signing request
openssl req -new -key my.key -config “xammp-dir\apache\bin\openssl.cnf” -out my.csr

<IfDefine HAVE_SSL>

<VirtualHost 10.0.0.5:443>
DocumentRoot /home/sites/domainname.com/html
ServerName www.domainname.com
ServerAlias domainname.com
ServerAdmin admin@domainname.com
ErrorLog /home/sites/domainname.com/logs/error_log
TransferLog / home/sites/domainname.com/logs/access_log
SSLEngine on
SSLCertificateFile /etc/httpd/conf/ssl.crt/domainname.com.crt
SSLCertificateKeyFile /etc/httpd/conf/ssl.key/domainname.com.key
SetEnvIf User-Agent “.*MSIE.*” nokeepalive ssl-unclean-shutdown
</VirtualHost>

</IfDefine>

you can read more here:
http://www.sitepoint.com/article/securing-apache-2-server-ssl/

Leave a Reply

Spam Protection by WP-SpamFree