Pages

Sunday, February 20, 2011

How to create self signed ssl certificate for Apache httpd server

 Virtual domain name for Apache Web Server :-> mydomain.com
Directory where the created certificates are stored  : /tmp/testcert/

Ø  Enter SSL key without a passphrase  :->

# openssl genrsa -out /tmp/testcert/mydomain.com.key 1024

Ø  Create a self-signed certificate :->
# openssl req -new –key  /tmp/testcert/mydomain.com key -x509 –out  /tmp/testcert/mydomain.com.crt -days 999
My Sample Apache httpd.conf virtual host container
<VirtualHost www.mydomain.com>
ServerAdmin webmaster@www.mydomain.com
DocumentRoot  /var/www/html/test
ServerName www.mydomain.com/
SSLEngine On
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /tmp/testcert/mydomain.com.crt
SSLCertificateKeyFile /tmp/testcert/mydomain.com.key
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
ErrorLog logs/www.mydomain.com-error_log
CustomLog logs/www.mydomain.com-access_log common
</VirtualHost>

Restart the apache Server
# /etc/init.d/httpd restart