How do you make a certificate for apache mod-ssl?

How do you make a certificate for apache mod-ssl?

Post by Jeff Beama » Sat, 08 Jan 2000 04:00:00



I've been messing around with mod-ssl, open-ssl, and apache-ssl.  Sadly
I haven't gotten anywhere.  I still don't know how to make a self signed
certificate for use with any of them.  Can somebody point me in the
right direction?

Thanks,
Jeff

 
 
 

How do you make a certificate for apache mod-ssl?

Post by Jeff Beama » Sat, 08 Jan 2000 04:00:00


Well I've gotten one step further.  But I still don't know how to turn a
*.pem file into the required *.key and *.crt files mod_ssl requires.

Thanks in advance,
Jeff

 
 
 

How do you make a certificate for apache mod-ssl?

Post by Chri » Sat, 08 Jan 2000 04:00:00


This is what I use when i need to create a test cert. I got this from the
mod_ssl FAQ.

1.  Create a Test Certificate.
            #openssl req -new -x509 -days 365 -key ssl.key/server.key -out
server.crt

-Chris

Quote:> I've been messing around with mod-ssl, open-ssl, and apache-ssl.  Sadly
> I haven't gotten anywhere.  I still don't know how to make a self signed
> certificate for use with any of them.  Can somebody point me in the
> right direction?

> Thanks,
> Jeff

 
 
 

How do you make a certificate for apache mod-ssl?

Post by Wally Whacke » Mon, 10 Jan 2000 04:00:00



> Well I've gotten one step further.  But I still don't know how to turn a
> *.pem file into the required *.key and *.crt files mod_ssl requires.

> Thanks in advance,
> Jeff

/usr/sbin/openssl req -new -x509 -key httpsd.key > httpsd.crt

Worked for me. You have to put httpsd.crt in your correct directory.

Wally
--
The best security scanning site in the world:
HTTP://HACKERWHACKER.COM/compare.dyn
Security sites that have changed in the last 6 hours:
http://packetstorm.securify.com/100.shtml
http://www.ussrback.com/ http://zdnet.com

 
 
 

How do you make a certificate for apache mod-ssl?

Post by Thomas L|fgre » Thu, 13 Jan 2000 04:00:00


    Jeff> Well I've gotten one step further.  But I still don't know
    Jeff> how to turn a *.pem file into the required *.key and *.crt
    Jeff> files mod_ssl requires.

I missed the start of this thread, but I think I know the answer.
OpenSSL has some functionality in the interactive 'openssl' program
for manipulating keys and store them in different formats.  One can
create self-signed client certs this way, for example.  If you're
using the old SSLeay I suggest you either upgrade or get a patch (I've
seen the patch available somewhere, but I forget where... anyway, this
patch was then merged into OpenSSL).

The documentation for OpenSSL is rather poor (at best), but I'd be
happy to send you an email with some basic instructions I wrote for
myself after reading the source.

Tom
--
T. Lofgren - Wherever I lay my .emacs, that's my ${HOME}
These opinions are mine, not yours.  Get your own damn opinions.

 
 
 

How do you make a certificate for apache mod-ssl?

Post by Kar Gay Li » Fri, 14 Jan 2000 04:00:00


Surprisingly, Thawte computing has working examples:

http://www.thawte.com/certs/server/keygen/mod_ssl.html

I am not using Apache + mod_ssl, I use Apache-SSL
which is available too at:

http://www.thawte.com/certs/server/keygen/apachessl.html



>     Jeff> Well I've gotten one step further.  But I still don't know
>     Jeff> how to turn a *.pem file into the required *.key and *.crt
>     Jeff> files mod_ssl requires.

> I missed the start of this thread, but I think I know the answer.
> OpenSSL has some functionality in the interactive 'openssl' program
> for manipulating keys and store them in different formats.  One can
> create self-signed client certs this way, for example.  If you're
> using the old SSLeay I suggest you either upgrade or get a patch (I've
> seen the patch available somewhere, but I forget where... anyway, this
> patch was then merged into OpenSSL).

> The documentation for OpenSSL is rather poor (at best), but I'd be
> happy to send you an email with some basic instructions I wrote for
> myself after reading the source.

> Tom
> --
> T. Lofgren - Wherever I lay my .emacs, that's my ${HOME}
> These opinions are mine, not yours.  Get your own damn opinions.

 
 
 

How do you make a certificate for apache mod-ssl?

Post by Jeff Beama » Fri, 14 Jan 2000 04:00:00


what are the major differences (if any) between mod-ssl and apache-ssl?
 
 
 

How do you make a certificate for apache mod-ssl?

Post by Bill » Fri, 14 Jan 2000 04:00:00



wrote in comp.os.linux.security :

Quote:>what are the major differences (if any) between mod-ssl and apache-ssl?

IIRC, mod-ssl launches an external program to deal with ssl, and
apache-ssl does it internally.

--
Bill "Houdini" Weiss

--
Haiku Error Message:  
Errors have occurred.
We won't tell you where or why.
Lazy programmers.

 
 
 

How do you make a certificate for apache mod-ssl?

Post by Paul » Sat, 15 Jan 2000 04:00:00


Check out www.modssl.org/docs/2.4/index.html ...
There you have all the answers to your questions.

Regards



Quote:> I've been messing around with mod-ssl, open-ssl, and apache-ssl.
Sadly
> I haven't gotten anywhere.  I still don't know how to make a self
signed
> certificate for use with any of them.  Can somebody point me in the
> right direction?

> Thanks,
> Jeff

--
----------------------
Paulo uses Mandrake :)
----------------------

Sent via Deja.com http://www.deja.com/
Before you buy.

 
 
 

How do you make a certificate for apache mod-ssl?

Post by Jeff Beama » Sat, 15 Jan 2000 04:00:00


thanks


> wrote in comp.os.linux.security :

> >what are the major differences (if any) between mod-ssl and apache-ssl?

> IIRC, mod-ssl launches an external program to deal with ssl, and
> apache-ssl does it internally.

> --
> Bill "Houdini" Weiss

> --
> Haiku Error Message:
> Errors have occurred.
> We won't tell you where or why.
> Lazy programmers.

 
 
 

How do you make a certificate for apache mod-ssl?

Post by Jeff Beama » Sat, 15 Jan 2000 04:00:00


I had, in places its wording confused me,  but I'll take a better look
at it.

Thanks,
Jeff


> Check out www.modssl.org/docs/2.4/index.html ...
> There you have all the answers to your questions.

> Regards



> > I've been messing around with mod-ssl, open-ssl, and apache-ssl.
> Sadly
> > I haven't gotten anywhere.  I still don't know how to make a self
> signed
> > certificate for use with any of them.  Can somebody point me in the
> > right direction?

> > Thanks,
> > Jeff

> --
> ----------------------
> Paulo uses Mandrake :)
> ----------------------

> Sent via Deja.com http://www.deja.com/
> Before you buy.

 
 
 

How do you make a certificate for apache mod-ssl?

Post by Panagiotis Malakoudi » Wed, 19 Jan 2000 04:00:00


Do you want to use a self signed certificate?

--

=================
Panagiotis S. Malakoudis
Systems Administrator
Space Hellas S.A.
=================


> I had, in places its wording confused me,  but I'll take a better look
> at it.

> Thanks,
> Jeff


> > Check out www.modssl.org/docs/2.4/index.html ...
> > There you have all the answers to your questions.

> > Regards



> > > I've been messing around with mod-ssl, open-ssl, and apache-ssl.
> > Sadly
> > > I haven't gotten anywhere.  I still don't know how to make a self
> > signed
> > > certificate for use with any of them.  Can somebody point me in the
> > > right direction?

> > > Thanks,
> > > Jeff

> > --
> > ----------------------
> > Paulo uses Mandrake :)
> > ----------------------

> > Sent via Deja.com http://www.deja.com/
> > Before you buy.

 
 
 

How do you make a certificate for apache mod-ssl?

Post by Jeff Beama » Wed, 19 Jan 2000 04:00:00


yep

> Do you want to use a self signed certificate?

> --

> =================
> Panagiotis S. Malakoudis
> Systems Administrator
> Space Hellas S.A.
> =================



> > I had, in places its wording confused me,  but I'll take a better look
> > at it.

> > Thanks,
> > Jeff


> > > Check out www.modssl.org/docs/2.4/index.html ...
> > > There you have all the answers to your questions.

> > > Regards



> > > > I've been messing around with mod-ssl, open-ssl, and apache-ssl.
> > > Sadly
> > > > I haven't gotten anywhere.  I still don't know how to make a self
> > > signed
> > > > certificate for use with any of them.  Can somebody point me in the
> > > > right direction?

> > > > Thanks,
> > > > Jeff

> > > --
> > > ----------------------
> > > Paulo uses Mandrake :)
> > > ----------------------

> > > Sent via Deja.com http://www.deja.com/
> > > Before you buy.

 
 
 

1. apache mod-ssl repeatedly requesting certificate

Greetings,

  I was wondering if anyone has come across this problem as I can't
find it inthe FAQs. I've recently enabled SSL on the install of apache
that comes with openbsd 2.8 and it all seems to be working correctly.

Except that I'm constantly asked for a certificate to authenticate to
the server with. I notice in the mod-ssl.org docs that it referes to a
program called gcache to prevent this, but this doesn't seem to exist
or be mentioned in the openbsd version.

 Is there some obvious permissions problem I'm missing or can anyone
give me any pointers.

Thanks.

--
Robm
873
  "Ask not what I can do for the stupid,
         but what the stupid can do for me" - Graeme Garden

2. How to stop fingering?

3. Apache-ssl or mod-ssl?

4. PPP/ISDN diagnostic help please

5. Replacing SSL Certficates in Apache mod-ssl

6. X-server for win95 to Linux

7. Apache-SSL or mod-SSL?

8. Help: Pthread monitoring tool

9. Apache1.3.3 + Apache-SSL mod + fp-apache mod

10. weird error message | Apache 1.3.22 with mod-ssl

11. Apache and mod-ssl

12. Apache, mod-ssl and PHP installation tutorial

13. Apache + mod-ssl + PHP or Perl script