Apache - Revision history

PhilippeTeuwen: Reverted edits by JasonAnderson (talk) to last revision by PhilippeTeuwen

2016-03-02T15:02:11Z

Reverted edits by JasonAnderson (talk) to last revision by PhilippeTeuwen

Can't load revision 10018

2016-03-02T12:50:16Z

minor updates

Can't load revision 9997

2010-11-24T20:32:36Z

Reverted edits by Etegohy (Talk) to last revision by PhilippeTeuwen

Can't load revision 6791

2010-11-24T00:26:33Z

Can't load revision 6631

2008-05-20T09:13:00Z

CAcert

← Older revision		Revision as of 09:13, 20 May 2008
Line 22:		Line 22:
	To add those certificates you also need to add the chain certificates from CAcert and to add to your config:		To add those certificates you also need to add the chain certificates from CAcert and to add to your config:
	SSLCertificateChainFile /etc/apache2/ssl/CAcert_chain.pem		SSLCertificateChainFile /etc/apache2/ssl/CAcert_chain.pem
			cf details in [[CAcert]]

	====Old====		====Old====

2008-05-20T09:12:01Z

New

← Older revision		Revision as of 09:12, 20 May 2008
Line 19:		Line 19:
	SSLProtocol all -SSLv2		SSLProtocol all -SSLv2
	cf http://httpd.apache.org/docs/2.0/mod/mod_ssl.html		cf http://httpd.apache.org/docs/2.0/mod/mod_ssl.html
			====[[CAcert]]====
			To add those certificates you also need to add the chain certificates from CAcert and to add to your config:
			SSLCertificateChainFile /etc/apache2/ssl/CAcert_chain.pem

	====Old====		====Old====

2008-02-19T01:02:00Z

New

← Older revision		Revision as of 01:02, 19 February 2008
Line 6:		Line 6:
	* Generate certificates, new method (from ssl-cert package):		* Generate certificates, new method (from ssl-cert package):
	make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/apache2/ssl/apache.pem		make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/apache2/ssl/apache.pem
	Little problem: by default the certificate is valid only 30 days, see [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=293821 bugreport], you've to edit make-ssl-cert script		Little problem: by default the certificate is valid only 30 days, see [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=293821 bugreport], you've to edit make-ssl-cert script and add "-days" options, e.g:
			openssl req -days 1024 ...
	* Verify generated certificate		* Verify generated certificate
	openssl x509 -text -in /etc/apache2/ssl/apache.pem		openssl x509 -text -in /etc/apache2/ssl/apache.pem

2008-01-24T13:34:49Z

New

← Older revision		Revision as of 13:34, 24 January 2008
Line 13:		Line 13:
	Edit default-ssl...		Edit default-ssl...
	ln -s /etc/apache2/sites-available/default-ssl /etc/apache2/sites-enabled/		ln -s /etc/apache2/sites-available/default-ssl /etc/apache2/sites-enabled/

			To activate only the secure ciphers, edit /etc/apache2/mods-available/ssl.conf and uncomment those lines:
			SSLCipherSuite HIGH:MEDIUM:!ADH
			SSLProtocol all -SSLv2
			cf http://httpd.apache.org/docs/2.0/mod/mod_ssl.html

	====Old====		====Old====
	* Generate certificates, manual method:		* Generate certificates, manual method:

2007-06-01T14:51:56Z

Activate ssl module

← Older revision		Revision as of 14:51, 1 June 2007
Line 3:		Line 3:
	===Activate ssl module===		===Activate ssl module===
	a2enmod ssl		a2enmod ssl
			====New====

	* Generate certificates, new method (from ssl-cert package):		* Generate certificates, new method (from ssl-cert package):
	make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/apache2/ssl/apache.pem		make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/apache2/ssl/apache.pem
Line 9:		Line 9:
	* Verify generated certificate		* Verify generated certificate
	openssl x509 -text -in /etc/apache2/ssl/apache.pem		openssl x509 -text -in /etc/apache2/ssl/apache.pem
			* Add apache2 config
			zcat /usr/share/doc/apache2.2-common/examples/apache2/extra/httpd-ssl.conf.gz > /etc/apache2/sites-available/default-ssl
			Edit default-ssl...
			ln -s /etc/apache2/sites-available/default-ssl /etc/apache2/sites-enabled/
			====Old====
	* Generate certificates, manual method:		* Generate certificates, manual method:
	openssl req -config /etc/ssl/openssl.cnf -new -out mydomain.csr		openssl req -config /etc/ssl/openssl.cnf -new -out mydomain.csr

2007-06-01T08:14:40Z

Activate ssl module

← Older revision		Revision as of 08:14, 1 June 2007
Line 4:		Line 4:
	a2enmod ssl		a2enmod ssl

	* Generate certificates, new method:		* Generate certificates, new method (from ssl-cert package):
	~~/usr/sbin/~~make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/apache2/ssl/apache.pem		make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/apache2/ssl/apache.pem
			Little problem: by default the certificate is valid only 30 days, see [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=293821 bugreport], you've to edit make-ssl-cert script
			* Verify generated certificate
			openssl x509 -text -in /etc/apache2/ssl/apache.pem
	* Generate certificates, manual method:		* Generate certificates, manual method:
	openssl req -config /etc/ssl/openssl.cnf -new -out mydomain.csr		openssl req -config /etc/ssl/openssl.cnf -new -out mydomain.csr