Topic: secure web site

[crazybob]

I want to have one of my doamins to have a secure area, (require https://www.mydoamin.com) to access it. I now have the how to on how to set up the cert, but need the rest of the story. I found a how to from D Mays, but it is for a much older version of e-smith (I am using 6.0 final) I have even read the manual, and can't find anything. Need a push in the right direction

Thanks

Bob

[mbachmann]

Go to console and cd /etc/httpd/conf/.

make server.key
make server.crt

You have to fill in some information. Remember the passphrase!

cd /home/e-smith/ssl.key/

Rename the old file
mv existing.key existing.keyold

Copy new server.key previously created (assuming you are in /home/e-smith/ssl.key)

cp /etc/httpd/conf/ssl.key/server.key ./

Rename it, set permissions
mv server.key existing.key
chmod 400 existing.key

Do copying/renaming/permitting task for server.crt in /home/e-smith/ssl.crt/
chmod 644 existing.crt.

Restart server
/etc/rc.d/init.d/httpd restart

Code: [Select]

Starting httpd:
Apache/1.3.27 mod_ssl/2.8.12 (Pass Phrase Dialog)
Some of your private key files are encrypted for security reasons.
In order to read them you have to provide us with the pass phrases.

Server www.whatever.de:443 (RSA)
Enter pass phrase:


It should ask for a password. Type it in. If not, you have done something wrong.

Test it by accessing the site via browser, examine and install the certificate. It should be yours, if it is form XYZ Corp, something's gone wrong. Retry.

I just figured that out as i have typed this. I used this horribly formated howto from chaloner: http://www.chaloner.ca/article.php?story=20020922181652718

It works for 6.0

[Muzo]

Hey! What a usefull Howto!


Thanks.

P.S.: to have a well formated text, just "view source"  and print it  

[crazybob]

Thanks for all the info on setting up the cert.

I am trying to find how to apply it to one of my virtual domains. I am not sure where to go from here. It is not that I want to require a user name and password, I just want a secure area to ensure that if sensitive data (credit card info etc. ) is passed, it won't get intercepted.

Thanks

Bob

[Anonymous]

Horribly formatted or not, I guess it worked for you. There is only so much time in the day....

Thanks for your lovely comments.

Chaloner Hale