logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Apache View previous topic :: View next topic
Reply to topic   Topic: https & apache & certification
Author
bghayad



Joined: 26 May 2013
Posts: 5
Location: Kuwait

PostPosted: Sun 26 May '13 19:15    Post subject: https & apache & certification Reply with quote

I decided to write a new thread as I need to make it simpler.

Can someone help me in the following parts to be able to fix my problem that is related to the https using apache2 (enabling https in apache2) at opensuse:

By the way, my opensuse version is:

openSUSE 12.1 (x86_64)
VERSION = 12.1
CODENAME = Asparagus

1) At the /etc/apache2/vhosts.d/vhost-ssl.conf, and if I do not have a name (as the server will be accessed using its IP address), can I place in the ServerName 192.168.0.5? Do I have to place it 192.168.0.5:443 or it is enough to be 192.168.0.5?

2) Is there a relation between the SSLCipherSuite values and the used method to generate the certificate?

3) I am afraid from the way that I am using to generate the certificate and the ssl module that is coming with apache2 at my machine which has opensuse. How can I select the right way?

Actually I used following commands to generate the .crt, .key and the .csr:

openssl genrsa -des3
openssl req -new -x509
openssl x509 -req

And that was from this link:

http://mrnovell.wordpress.com/2009/06/18/opensuse-linux-creating-self-signed-ssl-certificates/

But did not work with me !

Meanwhile I am placing:

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

4) Do I have to configure the virualhost? Do I have to create files under the directory /etc/apache2/vhosts.d? Because I will have one application to be browsed .. nothing more.

Appreciate the kindly help.
Regards
Bilal
Back to top
bghayad



Joined: 26 May 2013
Posts: 5
Location: Kuwait

PostPosted: Mon 27 May '13 1:59    Post subject: Reply with quote

I would like to add that the ssl-global.conf in its default configuration, and I need to know if the below configuration is effecting on the type of certificate files that I have to generate:
Code:

        AddType application/x-x509-ca-cert .crt
        AddType application/x-pkcs7-crl    .crl

        #   Pass Phrase Dialog:
        #   Configure the pass phrase gathering process.
        #   The filtering dialog program (`builtin' is a internal
        #   terminal dialog) has to provide the pass phrase on stdout.
        <IfDefine SYSTEMD>
        SSLPassPhraseDialog exec:/usr/sbin/apache2-systemd-ask-pass
        </IfDefine>
        <IfDefine !SYSTEMD>
        SSLPassPhraseDialog  builtin
        </IfDefine>


Regards
Bilal
Back to top
bghayad



Joined: 26 May 2013
Posts: 5
Location: Kuwait

PostPosted: Tue 28 May '13 20:14    Post subject: Reply with quote

Any Help?
Back to top


Reply to topic   Topic: https & apache & certification View previous topic :: View next topic
Post new topic   Forum Index -> Apache