On Mon, May 6, 2024 at 1:54 PM Mario Brandt <jbl...@gmail.com> wrote:
> Maybe this can be added to the wiki?
>
> Frank Gingras <thu...@apache.org> schrieb am Mo., 6. Mai 2024, 15:46:
>
>>
>>
>> On Mon, May 6, 2024 at 2:55 AM General Email <
>> general.email.12341...@gmail.com> wrote:
>>
>>> Hi,
>>>
>>> I have configured SSL and enabled HTTPS on Apache 2.4. It is working
>>> fine.
>>>
>>> If the docs team is interested, then they can put my instructions on
>>> the above topic in the documentation.
>>>
>>> The instructions are below:
>>>
>>>
>>> --------------------------------------------------------------
>>> Enabling HTTPS and Configuring SSL in Apache 2.4 on Windows 10
>>> Date: April, 2024
>>> --------------------------------------------------------------
>>>
>>>
>>> --------------------------------------------------------------------------------
>>> VERY IMPORTANT:
>>>
>>> You should not follow this process for a production environment because
>>> self-signed SSL certificate (that is being generated here) is a security
>>> risk.
>>> You should follow this process only for the local development
>>> environment.
>>>
>>> --------------------------------------------------------------------------------
>>>
>>> -------------------------------------
>>> Please follow the steps listed below:
>>> -------------------------------------
>>>
>>> Step 1: Stop Apache web server if it is already running.
>>>
>>> Step 2: Add "absolute_path_to_apache24_dir\bin" to the system environment
>>> variable "Path". openssl.exe is in this folder.
>>>
>>> Step 3: Open the Windows command prompt and change directory to
>>> "absolute_path_to_apache24_dir\conf".
>>>
>>> Step 4: On the command prompt, execute the following command:
>>>
>>> set
>>> OPENSSL_CONF=absolute_path_to_apache24_dir\conf\openssl.cnf
>>>
>>> If "absolute_path_to_apache24_dir" contains spaces then enclose
>>> the
>>> path in quotes.
>>>
>>> Step 5: Check that the OPENSSL_CONF variable is set to correct directory
>>> by
>>> executing the following command on the command prompt:
>>>
>>> echo %OPENSSL_CONF%
>>>
>>> Step 6: On the command prompt, execute the following command
>>> (openssl.exe is in "absolute_path_to_apache24_dir\bin" folder):
>>>
>>> openssl genrsa -out cert.key 2048
>>>
>>> Step 7: On the command prompt, execute the following command:
>>>
>>> openssl req -new -key cert.key -out cert.csr
>>>
>>> When you execute this command, you will be asked to give input
>>> for
>>> some fields. I had given input for only one field (and for other
>>> fields,
>>> I just hit "Enter" key):
>>>
>>> Common Name (e.g. server FQDN or YOUR name) []:localhost
>>>
>>> Step 8: On the command prompt, execute the following command:
>>>
>>> openssl x509 -req -days 3650 -in cert.csr -signkey cert.key -out
>>> cert.crt
>>>
>>> Step 9: Change a few lines in the
>>> "absolute_path_to_apache24_dir\conf\httpd.conf"
>>> file. I am listing the lines after the changes. I am not listing
>>> the
>>> original lines. You can search and change/replace the original
>>> lines.
>>>
>>> The changed lines are:
>>>
>>> Define SRVROOT "absolute_path_to_apache24_dir"
>>> LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
>>> LoadModule ssl_module modules/mod_ssl.so
>>> ServerName localhost:80
>>> Include conf/extra/httpd-ssl.conf
>>>
>>> Step 10: Change a few lines in the
>>> "absolute_path_to_apache24_dir\conf\extra\httpd-ssl.conf" file.
>>> I am listing the lines after the changes. I am not listing the
>>> original lines. You can search and change/replace the original
>>> lines.
>>>
>>> The changed lines are:
>>>
>>> ServerName localhost:443
>>> ServerAdmin ad...@localhost.localdomain.com
>>> SSLCertificateFile "${SRVROOT}/conf/cert.crt"
>>> SSLCertificateKeyFile "${SRVROOT}/conf/cert.key"
>>>
>>> Step 11 (Last Step): Now, you can start Apache web server and test.
>>>
>>> Since the security certificate that was generated here is
>>> self-signed,
>>> the browser may show you a warning that the
>>> connection/certificate,
>>> etc. is not trusted. But since this is your local development
>>> environment, you can ignore this warning and accept the risk and
>>> go ahead with the testing/development, etc.
>>>
>>> I do the same (ignore the warning and accept the risk).
>>>
>>> ==== End ====
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: docs-unsubscr...@httpd.apache.org
>>> For additional commands, e-mail: docs-h...@httpd.apache.org
>>>
>>>
>> I don't think those belong in the official httpd documentation, but I
>> wouldn't be opposed to adding the recipe in the httpd wiki.
>>
>
Mario,
That was my train of thought - I'll see about reviewing the content and
preparing the formatting.
The only problem is that I don't use windows, so I can't verify that it
works.
