Apache: Difference between revisions
initial writeup |
No edit summary |
||
| Line 31: | Line 31: | ||
string.digits, 1)[0]) | string.digits, 1)[0]) | ||
</source> | </source> | ||
And then use that to create and store some randomness. | |||
<source lang="bash"> | <source lang="bash"> | ||
./randomness.py > file1 | ./randomness.py > file1 | ||
./randomness.py > file2 | ./randomness.py > file2 | ||
./randomness.py > file3 | ./randomness.py > file3 | ||
# which is then fed into openssl | |||
sudo openssl genrsa -des3 -rand file1:file2:file3 -out server.key 1024 | sudo openssl genrsa -des3 -rand file1:file2:file3 -out server.key 1024 | ||
</source> | </source> | ||
| Line 57: | Line 58: | ||
{{Messagebox | {{Messagebox | ||
| type = success | | type = success | ||
| text = Because Debian-based systems use "mods-available" and "mods-enabled" through a convention of symbolic links which get included by wildcard in the main apache2.conf; and also because the default "load" configuration file for the module (ssl.conf.load) is already present on the system, you don't have to do anything more than the previous "a2enmod" command to get the module, and it's configuration file read into apache | | text = Because Debian-based systems use "mods-available" and "mods-enabled" through a convention of symbolic links which get included by wildcard in the main apache2.conf; and also because the default "load" configuration file for the module (ssl.conf.load) is already present on the system, you don't have to do anything more than the previous "a2enmod" command to get the module, and it's configuration file read into apache | ||
}} | }} | ||
| Line 77: | Line 78: | ||
In addition to setting Document Root, I modified these two directives: | In addition to setting Document Root, I modified these two directives: | ||
<pre> | <pre> | ||
SSLCertificateFile /etc/apache2/server.crt | SSLCertificateFile /etc/apache2/server.crt | ||
SSLCertificateKeyFile /etc/apache2/server.pem | SSLCertificateKeyFile /etc/apache2/server.pem | ||
</pre> | </pre> | ||
| Line 89: | Line 90: | ||
sudo apache2ctl graceful | sudo apache2ctl graceful | ||
</source> | </source> | ||
== SSL Providers == | |||
Check your domain registrar for their services or products around SSL certificates. There are a lot of Certificate Authorities to choose from. Plus a lot of options on those certificates. You can still get a free SSL certificate from StartSSL.com. If you want expert help in getting your site secured, contact http://eQuality-Tech.com | |||
[[Category:Howto]] | [[Category:Howto]] | ||
[[Category:Apache]] | [[Category:Apache]] | ||
[[Category:System Administration]] | [[Category:System Administration]] | ||