HTTPS Configuration

Simple httpd.conf

Listen 443
<VirtualHost *:443>
    <IfModule ssl_module>
        SSLEngine on
        SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

        SSLCertificateFile /etc/apache2/ssl/server.crt
        SSLCertificateKeyFile /etc/apache2/ssl/server.key

        <IfModule setenvif_module>
            BrowserMatch ".*MSIE.*" \
                nokeepalive ssl-unclean-shutdown \
                downgrade-1.0 force-response-1.0
        </IfModule>
    </IfModule>
</VirtualHost>

Generate SSL certificate

  • Source:  http://www.akadia.com/services/ssh_test_certificate.html
  • Step by step
    openssl genrsa -des3 -out server.key 1024
    
    openssl req -new -key server.key -out server.csr
    
    cp server.key server.key.org
    
    openssl rsa -in server.key.org -out server.key
    
    openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt