Thursday, December 31, 2009

APACHE SSL SUPPORT IN REDHAT LINUX

APACHE SSL SUPPORT
Features:
1. Secure/Encrypted communications
Requirements:
1. httpd
2. openssl
3. mod_ssl
4. crypto-utils (genkey) - used to generate certificates/private keys/CSRs

•also used to create a self-signed certificate
Tasks:
1. Install the requirements
•mod_ssl - module for Apache, which provides SSL support
yum -y install mod_ssl
/etc/httpd/conf.d/ssl.conf - includes key SSL directives
• crypto-utils - provies /usr/bin/genkey

2. Generate SSL usage keys using: genkey
•genkey site1.linuxcbt.internal - creates text-gui interface

3. Update /etc/httpd/conf.d/ssl.conf to reference the new keys (public/private)

4. Restart the HTTPD server

•service httpd restart

•httpd -S

5. Test HTTPS connectivity
•https://192.168.75.199

Note: For mutliple SSL sites, copy the: /etc/httpd/conf.d/ssl.conf file to distinct files, that match your distinct IP-based VHosts

No comments:

Post a Comment