Difference between revisions of "Webserver"

From Blue-IT.org Wiki

(Ubuntu Hardy - 8.04)
(Ubuntu Hardy - 8.04)
Line 9: Line 9:
  
 
  sudo apt-get install ssl-cert
 
  sudo apt-get install ssl-cert
  sudo mkdir "${MY_SSLDIR}"
+
  sudo mkdir "${MY_SSL_DIR}"
 
  sudo /usr/sbin/make-ssl-cert /usr/share/ssl-cert/ssleay.cnf "${MY_SSLDIR}/${MY_PAM_FILE}"
 
  sudo /usr/sbin/make-ssl-cert /usr/share/ssl-cert/ssleay.cnf "${MY_SSLDIR}/${MY_PAM_FILE}"
  

Revision as of 09:09, 31 July 2008

Apache2

SSL

Ubuntu Hardy - 8.04

First create a server certificate. Please add the directory and filennames according to your needs:

sudo a2enmod ssl
export MY_SSL_DIR="/etc/apache2/ssl"
export MY_PAM_FILE="apache.pem"
sudo apt-get install ssl-cert
sudo mkdir "${MY_SSL_DIR}"
sudo /usr/sbin/make-ssl-cert /usr/share/ssl-cert/ssleay.cnf "${MY_SSLDIR}/${MY_PAM_FILE}"

Now add the following to your virtual hosts config file (test with default). And use the pam filename and path from above:

<VirtualHost *>

[...]
       SSLEngine on
       SSLCertificateFile /etc/apache2/ssl/apache.pem
       SSLProtocol all
       SSLCipherSuite HIGH:MEDIUM
[...]

Restart the webserver

sudo invoke-rc.d apache2 restart

Subversion