How to implement a Verisign SSL certificate in Apache and get https going ?
Issue
-
Apache is currently running and SSL encrypted web site needs to be launched.
-
Openssl being used to generate a private key and a certificate request, using the following commnands:
# /usr/bin/openssl genrsa -rand /dev/urandom -out /etc/httpd/conf/server.key 2048
# /usr/bin/openssl req -new -key /etc/httpd/conf/server.key -out /etc/httpd/conf/server.csr
-
The certificate request is then sent through a group in the locality which goes through Verisign and returns an actual certificate sent to as a *.cer file.
-
How to proceed further?
-
Does one need to to add entries to httpd.conf such as those on https://access.redhat.com/kb/docs/DOC-6117 but when this is done there are errors indicating "those statements are invalid and apache will not restart".
-
Doc at https://access.redhat.com/kb/docs/DOC-49865 talks about mod_nss but that might not work since the private key and csr are generated using openssl.
- mod_ssl is the only option?
Environment
- Red Hat Enterprise Linux 5.6
- Apache (httpd)
- OpenSSL
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.