Configure Of SSL WWW Server On CentOS4.3

warning: Cannot modify header information - headers already sent by (output started at /home/content/k/h/a/khairisuleiman/html/index.php:3) in /home/content/k/h/a/khairisuleiman/html/includes/common.inc on line 141.

Basic Linux Command

Configure of SSL WWW server on Linux CentOS4.3

Secure Sockets Layer (SSL), are cryptographic protocols that provide security and data integrity for communications over TCP/IP networks such as the Internet. TLS and SSL encrypt the segments of network connections at the Transport Layer end-to-end.

How to configure SSL WWW server on CentOS4.3?

-ssl config
check the existance of next in httpd.conf
    <IfModule mod_ssl.c>
      Include conf/ssl.conf
    </IfModule>

modify ssl.conf as
    <VirtualHost 172.16.162.230:443> #it can be accessed by https://tkksqlphp.configureinstallsetup.com/
    DocumentRoot "/usr/local/apache2/htdocsssl"
    ServerName tkksqlphp.configureinstallsetup.com:443 #443 can be ommitted
    ServerAdmin bob@configureinstallsetup.com
    ErrorLog /usr/local/apache2/logs/error_log
    TransferLog /usr/local/apache2/logs/access_log
    SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt
    SSLCertificateKeyFile /usr/local/apache2/conf/ssl.key/server.key

-httpd config test
/usr/local/apache2/bin/apachectl configtest

-ssl directories
mkdir /usr/local/apache2/htdocsssl

mkdir /usr/local/apache2/conf/ssl.key
mkdir /usr/local/apache2/conf/ssl.crt
mkdir /usr/local/apache2/conf/ssl.crl

-create key, self-signed certificate
# openssl req \
# -new \
# -x509 \
# -days 365 \
# -keyout /usr/local/apache2/conf/ssl.key/server.key \
# -out /usr/local/apache2/conf/ssl.crt/server.crt
# -subj '/CN=Test-Certificate bob'
# we will be asked pass phrase
# restart httpd, we will be asked pass phrase

openssl genrsa -des3 -out pass.key 1024
openssl rsa -in pass.key -out server.key #making not being asked pass phrase
openssl req -new -key server.key -x509 -out server.crt -days 999
inquiry Common Name must be server name: tkksqlphp.configureinstallsetup.com
cp server.key /usr/local/apache2/conf/ssl.key/
cp server.crt /usr/local/apache2/conf/ssl.crt/

rm pass.key server.key server.crt

-start httpd ssl
in /etc/rc.d/rc.local
/usr/local/apache2/bin/apachectl startssl

-test ssl
access the server as
https://172.16.162.230/
https://tkksqlphp.configureinstallsetup.com/ #it may take several minutes becomming effective

Bookmark/Search this post with: