Created
January 12, 2015 23:11
-
-
Save SharaaEsper/a4c1b25057a44b109956 to your computer and use it in GitHub Desktop.
How I SSL
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Split certs into site.com.crt and site.com.ca.crt | |
| # ls ssl/ | |
| tmpkey www.<DOMAIN>.com.ca.crt www.<DOMAIN>.com.crt www.<DOMAIN>.com.csr www.<DOMAIN>.com.key | |
| .ca.crt, .crt and .key are the needed files, the rest can be removed. | |
| In /etc/httpd/conf.d/ssl.conf I commented out the default vhost (Starting with <Virutalhost> and through the rest of the file) | |
| In /etc/httpd/conf.d/ssl.conf I added a NameVirtualHost directive. THis lets SNI work if you get more SSL sites in the future. | |
| NameVirtualHost <IPOFSERVER>:443 | |
| In /etc/httpd/conf.d/vhosts-dti.conf I added a new vhost. | |
| SSLCertificateFile <-- this is the certificate that said 'web certificate' in the original file | |
| SSLCertificateChainFile <-- This is the bundle/intermediary cert | |
| SSLCertificateKeyFile <--- This is the key you first generated | |
| Verify syntax with httpd -t, after reporting ok bounce apache via service httpd restart |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment