magic-lamp
SSL Howto

(Most of this documentation came from SSL-RedHat-HOWTO-3)

 

I've also found Van's Apache SSL/TLS mini-HowTo very useful.



HowTo create an SSL key and Certificate for a Virtual Domain in Apache

Taken from SSL-RedHat-HOWTO-4:
A few things to keep in mind: You can have multiple virtual hosts on the same server. You can have numerous name-based virtual hosts on the same IP address. You can also have numerous name-based virtual hosts and one (1) secure virtual host on the same IP. But - you cannot have multiple secure virtual hosts on the same IP. The question that so many ask: Why? The answer is: SSL works below the application layer. Name based hosts are not defined until the application layer.
Keys are stored in /etc/httpd/conf/ssl.key/
Certificates are stored in /etc/httpd/conf/ssl.crt/

GENERATING THE KEY

> openssl genrsa -out server-rsa.key 1024

GENERATING A SELF-SIGNED CERTIFICATE

> cd ../ssl.crt
> openssl req -new -key ../ssl.key/intranet-rsa.key -days 365 -x509 -out intranet-rsa.crt


HowTo create an UW-IMAP SSL Key and Certificate

Certificates are stored in /usr/share/ssl/certs. The certificate for IMAP is called imapd.pem. This file contains the key and the signed certificate.

GENERATING THE KEY

> openssl genrsa -out imapd.key 1024

GENERATING A SELF-SIGNED CERTIFICATE

> openssl req -new -key imapd.key -days 365 -x509 -out imapd.new


Copyleft © 1998 - 2007 • Jinn Koriech