SSL Certificate Creation

From Antiflux Wiki

Revision as of 17:44, 17 May 2006 (edit) Tim (Talk | contribs) ← Previous diff		Current revision (19:04, 29 September 2007) (edit) (undo) Tim (Talk | contribs)
Line 15:		Line 15:
	<li><code>apachectl start</code></li>		<li><code>apachectl start</code></li>
	</ol>		</ol>
		+
		+	[[Category:Admin]]

---

Current revision

To generate a certificate for "hostname" signed with our CA key:

1. openssl genrsa -out /etc/ssl/private/hostname.key 1024
2. openssl req -new -key /etc/ssl/private/hostname.key -out /etc/ssl/antiflux/hostname.csr
3. cd /etc/ssl/antiflux
4. make sign
5. mv hostname.cert /etc/ssl/certs/hostname.crt

Note: "make sign" will delete the CSR, so make a copy ahead of time if you're going to want it later.

Stop and start any services using the certificate. Apache doesn't seem to load the new cert if it's simply restarted - you have to actually stop and start it.

1. apachectl stop
2. apachectl start