[APACHE] SSL certificate

gistfile1.txt

Step 1: Generate a Private Key
  openssl genrsa -des3 -out server.key 1024
 
Step 2: Generate a CSR (Certificate Signing Request)
  openssl req -new -key server.key -out server.csr
 
Step 3: Remove Passphrase from Key
  cp server.key server.key.old
  openssl rsa -in server.key.old -out server.key
 
Step 4: Generating a Self-Signed Certificate
  openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
 
Step 5: Installing the Private Key and Certificate
  a2enmod ssl
  mkdir /etc/apache2/ssl
  cp server.crt /etc/apache2/ssl/ssl.crt
  cp server.key /etc/apache2/ssl/ssl.key
 
Step 6: Virtuel Host
  <VirtualHost *:443>
    ServerAdmin webmaster@localhost

    DocumentRoot /var/www
    <Directory />
      Options FollowSymLinks
      AllowOverride None
    </Directory>
    <Directory /var/www/>
      Options Indexes FollowSymLinks MultiViews
      AllowOverride None
      Order allow,deny
      allow from all
    </Directory>

    ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
    <Directory "/usr/lib/cgi-bin">
      AllowOverride None
      Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
      Order allow,deny
      Allow from all
    </Directory>

    SSLEngine on
    ServerSignature On
    SSLCertificateFile /etc/apache2/ssl/ssl.crt
    SSLCertificateKeyFile /etc/apache2/ssl/ssl.key
    SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown

    ErrorLog ${APACHE_LOG_DIR}/ssl-error.log

    # Possible values include: debug, info, notice, warn, error, crit,
    # alert, emerg.
    LogLevel warn

    CustomLog ${APACHE_LOG_DIR}/ssl-access.log combined
  </VirtualHost>
 
---
 
Certificate Signing Request for webserver
 
openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr