Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
Topic: https & apache & certification |
|
Author |
|
bghayad
Joined: 26 May 2013 Posts: 5 Location: Kuwait
|
Posted: Sun 26 May '13 19:15 Post subject: https & apache & certification |
|
|
I decided to write a new thread as I need to make it simpler.
Can someone help me in the following parts to be able to fix my problem that is related to the https using apache2 (enabling https in apache2) at opensuse:
By the way, my opensuse version is:
openSUSE 12.1 (x86_64)
VERSION = 12.1
CODENAME = Asparagus
1) At the /etc/apache2/vhosts.d/vhost-ssl.conf, and if I do not have a name (as the server will be accessed using its IP address), can I place in the ServerName 192.168.0.5? Do I have to place it 192.168.0.5:443 or it is enough to be 192.168.0.5?
2) Is there a relation between the SSLCipherSuite values and the used method to generate the certificate?
3) I am afraid from the way that I am using to generate the certificate and the ssl module that is coming with apache2 at my machine which has opensuse. How can I select the right way?
Actually I used following commands to generate the .crt, .key and the .csr:
openssl genrsa -des3
openssl req -new -x509
openssl x509 -req
And that was from this link:
http://mrnovell.wordpress.com/2009/06/18/opensuse-linux-creating-self-signed-ssl-certificates/
But did not work with me !
Meanwhile I am placing:
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
4) Do I have to configure the virualhost? Do I have to create files under the directory /etc/apache2/vhosts.d? Because I will have one application to be browsed .. nothing more.
Appreciate the kindly help.
Regards
Bilal |
|
Back to top |
|
bghayad
Joined: 26 May 2013 Posts: 5 Location: Kuwait
|
Posted: Mon 27 May '13 1:59 Post subject: |
|
|
I would like to add that the ssl-global.conf in its default configuration, and I need to know if the below configuration is effecting on the type of certificate files that I have to generate:
Code: |
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
# Pass Phrase Dialog:
# Configure the pass phrase gathering process.
# The filtering dialog program (`builtin' is a internal
# terminal dialog) has to provide the pass phrase on stdout.
<IfDefine SYSTEMD>
SSLPassPhraseDialog exec:/usr/sbin/apache2-systemd-ask-pass
</IfDefine>
<IfDefine !SYSTEMD>
SSLPassPhraseDialog builtin
</IfDefine>
|
Regards
Bilal |
|
Back to top |
|
bghayad
Joined: 26 May 2013 Posts: 5 Location: Kuwait
|
Posted: Tue 28 May '13 20:14 Post subject: |
|
|
Any Help? |
|
Back to top |
|
|
|
|
|
|