self-signed certificates

chris (2003-01-21 10:02:20)
3248 views
0 replies
I had to generate a self signed crt this morning.. and just to save searching in the future, here\'s a couple of notes on how to do it.. it\'s quite a simple process.

1) Generate the key
openssl genrsa -des3 -out domainname.co.uk.key 1024

2) Generate the certificate
openssl req -new -key domainname.co.uk.key -x509 -out domainname.co.uk.crt

3) ensure the httpd.conf points to the key and crt files
SSLCertificateFile /path/to/ssl.crt/www.domainname.co.uk.crt
SSLCertificateKeyFile /path/to/ssl.key/www.domainname.co.uk.key

4) build modssl with the above key and crt files

5) start the ssl server and hope...
/usr/local/apache/bin/apachectl startssl

christo
comment