self-signed apache certificate

Startseite
Published by guldi on März 3rd, 2009 in server, security, apache

Generate private key:

openssl genrsa -des3 -out server.key 1024

Generate csr (Certificate Signing Request)

openssl req -new -key server.key -out server.csr

Remove passphrase from key

cp server.key server.key.org
openssl rsa -in server.key.org -out server.key

Generate self-signed chertificate

openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

Install new certificate under gentoo

cp server.crt /etc/apache2/ssl/server.crt
cp server.key /etc/apache2/ssl/server.key

or in newer versions:

cp server.crt /etc/ssl/apache2/server.crt
cp server.key /etc/ssl/apache2/server.key

After restarting apache, it should all be ok.

Source/more info: http://www.akadia.com/services/ssh_test_certificate.html (thanks)

 

Too Cool for Internet Explorer