Create new SSL certificate for https

I need to create new certificate's for my apache server. I'm a little confused on how to do this. Does anyone have a good link they can tell me or anything.

Thanks
Rob
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Create new SSL certificate for https

> I need to create new certificate's for my apache server. I'm a little
confused on how to do this. Does anyone have a good link they can tell me or
anything.

This should give you a good understanding of certificates and how to use the
openssl command line tool to manage them:
http://apacheworld.org/ty24/site.chapter17.html

Best regards

Daniel
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: Create new SSL certificate for https

Rob,

> I need to create new certificate's for my apache server. I'm a
> little confused on how to do this. Does anyone have a good link
> they can tell me or anything.

A simple and very fast way to do it for testing purposes is to
use FreeICP project's free entry-level CA:

https://ca.freeicp.org/webra/entry-level

Just type your server's address (www.yourserver.com or whatever)
and it'll generate the private key and public certificate for you
right on the spot. Save them to files and point the mod_ssl
SSLCertificateFile and SSLCertificateKeyFile to them. I assume you
can handle the httpd.conf part.

Albeit all that works, this is not very secure. When you move
your server to production status, you should get a higher security
grade certificate. Unfortunately, the FreeICP project's Verified
Identity CA is still not offering server certificates -- this is
still being implemented to fit their free/collaborative identity
verification system; so, for the time being, you should try one of
the commercial CAs (VeriSign, Thawte, etc).

--Marco "Kiko" Carnut
--Tempest Security Technologies/FreeICP.ORG

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Create new SSL certificate for https

This is a cryptographically signed message in MIME format.

--------------ms000701020108080402040803
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit

use this command:

openssl req -config openssl.cnf -new -out xxx.csr
openssl rsa -in privkey.pem -out xxx.key
openssl x509 -in xxx.csr -out xxx.cert -req -signkey xxx.key -days 365
openssl x509 -in xxx.cert -out xxx.der.crt -outform DER

cy user a écrit:
> I need to create new certificate's for my apache server. I'm a little confused on how to do this. Does anyone have a good link they can tell me or anything.
>
> Thanks
> Rob
> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org
>


--------------ms000701020108080402040803
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEH AQAAoIIEzjCC
AmMwggHMAgECMA0GCSqGSIb3DQEBBAUAMIGBMQswCQYDVQQGEwJTSTERMA8G A1UECBMIU2xv
dmVuaWExEDAOBgNVBAcTB01hcmlib3IxHTAbBgNVBAMTFHN0dXBhci5ob21l bGludXgubmV0
MS4wLAYJKoZIhvcNAQkBFh9wb3N0bWFzdGVyQHN0dXBhci5ob21lbGludXgu bmV0MB4XDTAy
MTIxMjExMzY0OVoXDTAzMTIxMjExMzY0OVowcjELMAkGA1UEBhMCU0kxETAP BgNVBAgTCFNs
b3ZlbmlhMRAwDgYDVQQHEwdNYXJpYm9yMRQwEgYDVQQDEwtTYXNhIFNUVVBB UjEoMCYGCSqG
SIb3DQEJARYZc2FzYUBzdHVwYXIuaG9tZWxpbnV4Lm5ldDCBnzANBgkqhkiG 9w0BAQEFAAOB
jQAwgYkCgYEAuPDzDL2oxWDqfSyIGvjH7JQTcF+Dn6tM6O2D4IGrgQK2MfAJ Xcd+AaMlwyGq
P3sND4BNo5mgsz7XyTjddvfRaste6UIUDnsbNlUQI+GApPHAoeiBTt7rWbkS YsllVPn3nS1t
indhZIiKWSbDfTRAOxz9Vk1dwmj9L7LoB8WcZ7MCAwEAATANBgkqhkiG9w0B AQQFAAOBgQBz
4fyueMI3+ORCD61BQid7JvCdCVpj7MF4lf4zh+WQpP7klV3/+8OMkLA3TK8E vDoLNeFKgbZZ
STSV6cUGuscfESGn9Kq0M9OMyNFFc/IR2qGgsohEZLa5EScodGUfOJzPlg1K NqXXaV3Aomyq
3WhJ07a2c9kwXpy/flFLlUmccDCCAmMwggHMAgECMA0GCSqGSIb3DQEBBAUA MIGBMQswCQYD
VQQGEwJTSTERMA8GA1UECBMIU2xvdmVuaWExEDAOBgNVBAcTB01hcmlib3Ix HTAbBgNVBAMT
FHN0dXBhci5ob21lbGludXgubmV0MS4wLAYJKoZIhvcNAQkBFh9wb3N0bWFz dGVyQHN0dXBh
ci5ob21lbGludXgubmV0MB4XDTAyMTIxMjExMzY0OVoXDTAzMTIxMjExMzY0 OVowcjELMAkG
A1UEBhMCU0kxETAPBgNVBAgTCFNsb3ZlbmlhMRAwDgYDVQQHEwdNYXJpYm9y MRQwEgYDVQQD
EwtTYXNhIFNUVVBBUjEoMCYGCSqGSIb3DQEJARYZc2FzYUBzdHVwYXIuaG9t ZWxpbnV4Lm5l
dDCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAuPDzDL2oxWDqfSyIGvjH 7JQTcF+Dn6tM
6O2D4IGrgQK2MfAJXcd+AaMlwyGqP3sND4BNo5mgsz7XyTjddvfRaste6UIU DnsbNlUQI+GA
pPHAoeiBTt7rWbkSYsllVPn3nS1tindhZIiKWSbDfTRAOxz9Vk1dwmj9L7Lo B8WcZ7MCAwEA
ATANBgkqhkiG9w0BAQQFAAOBgQBz4fyueMI3+ORCD61BQid7JvCdCVpj7MF4 lf4zh+WQpP7k
lV3/+8OMkLA3TK8EvDoLNeFKgbZZSTSV6cUGuscfESGn9Kq0M9OMyNFFc/IR 2qGgsohEZLa5
EScodGUfOJzPlg1KNqXXaV3Aomyq3WhJ07a2c9kwXpy/flFLlUmccDGCAoAw ggJ8AgEBMIGH
MIGBMQswCQYDVQQGEwJTSTERMA8GA1UECBMIU2xvdmVuaWExEDAOBgNVBAcT B01hcmlib3Ix
HTAbBgNVBAMTFHN0dXBhci5ob21lbGludXgubmV0MS4wLAYJKoZIhvcNAQkB Fh9wb3N0bWFz
dGVyQHN0dXBhci5ob21lbGludXgubmV0AgECMAkGBSsOAwIaBQCgggFOMBgG CSqGSIb3DQEJ
AzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTAzMDEyMTE2MjgyMlow IwYJKoZIhvcN
AQkEMRYEFCh4PDr+W48ODLzaSjUlXPyOsXYWMFIGCSqGSIb3DQEJDzFFMEMw CgYIKoZIhvcN
AwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0G CCqGSIb3DQMC
AgEoMIGaBgsqhkiG9w0BCRACCzGBiqCBhzCBgTELMAkGA1UEBhMCU0kxETAP BgNVBAgTCFNs
b3ZlbmlhMRAwDgYDVQQHEwdNYXJpYm9yMR0wGwYDVQQDExRzdHVwYXIuaG9t ZWxpbnV4Lm5l
dDEuMCwGCSqGSIb3DQEJARYfcG9zdG1hc3RlckBzdHVwYXIuaG9tZWxpbnV4 Lm5ldAIBAjAN
BgkqhkiG9w0BAQEFAASBgB+SLKrV7bBUoA+Bjl+DHBZpqEz1YnmC1f/CrWyI rZ9I0ZAk9t7n
ELDv44FeOtCdCoPM5l4Oks3PtCVM81W4wKjWrIdTfYR5/0pTkM3H8DO1UmkX 0ly55+B8F7Cs
tcYgCBD+SuVNCI3+B/Vip1ijLi0dvypzEnIP5Kk5p0APPRPfAAAAAAAA
--------------ms000701020108080402040803--

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org