Apache ssl

Apache ssl ajutise self-signed sertifikaadi genereerimine

Näite aluseks FreeBSD

mkdir /usr/local/etc/apache2/ssl.key/
mkdir /usr/local/etc/apache2/ssl.crt/

openssl genrsa -des3 -out server.key 1024
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 300 -in server.csr -signkey server.key -out server.crt
openssl rsa -in server.key -out server.key

cp server.key /usr/local/etc/apache2/ssl.key/
cp server.crt /usr/local/etc/apache2/ssl.crt/
chmod 0400 /usr/local/etc/apache2/ssl.key/server.key
chmod 0400 /usr/local/etc/apache2/ssl.crt/server.crt

Lisame FreeBSD's faili /etc/rc.local rea

apache2ssl_enable="YES"

Käivitame apache ssl toega

apachectl sslstart

Kontrollime käsuga sockstat, kas kuulab?

ftp# sockstat | grep 443
www      httpd      20720 4  tcp46  *:443                 *:*
www      httpd      20709 4  tcp46  *:443                 *:*
www      httpd      20020 4  tcp46  *:443                 *:*
www      httpd      20019 4  tcp46  *:443                 *:*

kuulab :]