Linux SSL cert creation on RedHat 7.2

[Vernon Webb <ve...@comp-wiz.com>]

Can someone tell me where I can find a good how-to or can someone please 
explain how to setup and create ssl certs and keys for an Apache driven web 
site? 

I've used the following to create the crt:
     openssl genra -out privkey.pem
     openssl req -new -key privkey.pem -out cert.crt

But what else do I need? Don't I need a key? I've noticed in the default 
httpd.conf that the follwoing is used:

SSLEngine on
SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key

So how do I create the key? I tried using the server's key, but when I look 
at it is says localhost.localdomain

Thanks


-- 
This message has been scanned for viruses and
dangerous content by Webb Solutions' MailScanner,
and is believed to be clean.

Fw: Linux SSL cert creation on RedHat 7.2

[Vernon Webb <ve...@comp-wiz.com>]

Let me expand a bit please. I followed these directions:

http://www.ssl.com/apache_mod_SSL.asp

and did this:

openssl genrsa -des3 -out websites.key 1024
openssl req -new -key websites.key -out swingingpenpals.csr

My question is that it seems I'm missing a step where I create the crt 
file. How do I do that without going through one of the pay cert vendors?

Thanks

V

-- 
This message has been scanned for viruses and
dangerous content by Webb Solutions' MailScanner,
and is believed to be clean.

Re: Linux SSL cert creation on RedHat 7.2

[Vernon Webb <ve...@comp-wiz.com>]

That worked great. Thanks!!

-- 
This message has been scanned for viruses and
dangerous content by Webb Solutions' MailScanner,
and is believed to be clean.

Re: Linux SSL cert creation on RedHat 7.2

[Bojan Smojver <bo...@rexursive.com>]

This is what I do.

Bojan

On Mon, 2002-10-28 at 11:13, Vernon Webb wrote:
> Can someone tell me where I can find a good how-to or can someone please 
> explain how to setup and create ssl certs and keys for an Apache driven web 
> site? 
> 
> I've used the following to create the crt:
>      openssl genra -out privkey.pem
>      openssl req -new -key privkey.pem -out cert.crt
> 
> But what else do I need? Don't I need a key? I've noticed in the default 
> httpd.conf that the follwoing is used:
> 
> SSLEngine on
> SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
> SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key
> 
> So how do I create the key? I tried using the server's key, but when I look 
> at it is says localhost.localdomain
> 
> Thanks
> 
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by Webb Solutions' MailScanner,
> and is believed to be clean.
>