Hello Everyone.
I am a very new user of Apache and I have a ton of questions. I have
just started a new job and have been tasked with getting apache-ssl up
and running on a machine. The OS is Linux Redhat 5.1 and I downloaded
SSLeay-0.9.0b-3.i386.rpm and apache-mod_ssl-1.3.2-2.0.12-3.i386.rpm.
I used the rpm -I command to get these two packages installed and I got
no errors..with the exception of having to remove and old version of
apache. This gave me a new directory (one of many) /home/httpd
I made a directory called /home/www/open and /home/www/secure. In the
open directory I placed all of the orginal httpd files. I have nothing
but a test index.html file in the secure directory so far.
I modified the cnf files located in /etc/httpd/conf to reflect this
change and also set up two virtual hosts..one open and one secure. The
secure site defaults to the open site right now but I guess that is
because I don't have the ssl set up properly yet. I don't seem to have
any other problems with that part.
Now I have moved on to the certificate stuff. I have been trying to
follow the documentation located at
http://www.engelschall.com/sw/mod_ssl/docs
<http://www.engelschall.com/sw/mod_ssl/docs> to get through this part.
I started with question 12 that says "OK, I've got my server installed
and now want to create a real SSL server certificate for it. How do I
do that?
Was this the right place to start?
Following the answer to this question I made the server.key, server.csr,
ca.key and ca.crt. But where was I suppose to create these. When I try
to sign the certificate I find that I had to specify the config file to
use which was located in /etc/ssleay.cnf. In this file it had entries
for certificate, serial, crl, private_key, .... And the directory
structure included subdirectories named certs and private. I have a
location that has these 2 subdirectories in it so I changed the dir to
that location.... /var/ssl Now, where should I create the keys and
ccsr and crt....stuff?
Can someone please take pitty on this recent college grad and give me a
hand with this. I know it will take a lot of time to help walk me
through it but your help will be VERY appreciated.
Thanks in advance.
Salome Harrison
______________________________________________________________________
Apache Interface to SSLeay (mod_ssl) www.engelschall.com/sw/mod_ssl/
Official Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
