{"id":55,"date":"2008-07-21T01:16:24","date_gmt":"2008-07-21T06:16:24","guid":{"rendered":"http:\/\/yourlinuxguy.com\/?p=55"},"modified":"2008-07-16T11:22:29","modified_gmt":"2008-07-16T16:22:29","slug":"how-can-i-quickly-enable-ssl-with-apache2","status":"publish","type":"post","link":"https:\/\/yourLinuxGuy.com\/?p=55","title":{"rendered":"How can I quickly enable SSL with Apache2?"},"content":{"rendered":"

So you’ve built a Linux server, and you’re testing it out, and you want to enable SSL for encrypting your http traffic in testing or non-production use. Right. No prob. I’ve put together an extremely quick cheat-sheet on how to do it on a Suse server, and some of it applies to other distros as well. Here we go…<\/p>\n

First, please start by reading some of this (if present): \/etc\/sysconfig\/apache2<\/code> …there are a few good suggestions (as well as a bunch of configuration options) to get you started. The steps below are based on the things mentioned there.<\/p>\n

Now, to create the certificate(s) for use, you can do it one of two quick-and-easy ways:<\/p>\n

Option 1: To create a test certificate from “Snake Oil CA” as root, run:
\ncd \/usr\/share\/doc\/packages\/apache2; .\/certificate.sh<\/code>
\n…and fill in the values as prompted.<\/p>\n

Option 2: To create a self-named CA, self-signed cert, do this instead:
\n\/usr\/bin\/gensslcert -c US -s MI -l \"Southfield\" -o \"Your Linux Guy\" -e jpavlov@yourLinuxGuy.com -d -n www.yourLinuxGuy.com<\/code>
\n…or similar; of course customize to taste. This is actually my preferred test method, over the “Snake Oil” stuff. Use the following command to get the options:
\n\/usr\/bin\/gensslcert --help<\/code><\/p>\n

Then, in \/etc\/sysconfig\/apache2<\/code> make the following changes\/validations:
\n– Ensure the APACHE_MODULES<\/code> section includes ssl<\/code>
\n– Add SSL<\/code> to the APACHE_SERVER_FLAGS<\/code> section<\/p>\n

Also, in \/etc\/apache2\/vhosts.d\/<\/code> do the following things:
\n– Copy vhost-ssl.template<\/code> to vhost-ssl.conf<\/code>
\n– Edit vhost-ssl.conf<\/code>, and change:
\n“ServerName<\/code>” to match your server’s name in \/etc\/hosts<\/code>
\n“ServerAdmin<\/code>” to your email address<\/p>\n

Finally, restart apache with:
\nrcapache2 stop<\/code>
\nrcapache2 start<\/code><\/p>\n

You are done! Now hit your webserver at https:\/\/yourServerName\/ and enjoy the SSL goodness.<\/p>\n

Enjoy…<\/p>\n

\ud83d\ude42<\/p>\n","protected":false},"excerpt":{"rendered":"

So you’ve built a Linux server, and you’re testing it out, and you want to enable SSL for encrypting your http traffic in testing or non-production use. Right. No prob. I’ve put together an extremely quick cheat-sheet on how to…
Read more<\/a><\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[44,11,45,15],"tags":[],"class_list":["post-55","post","type-post","status-publish","format-standard","hentry","category-apache","category-intermediate","category-openssl","category-suse"],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pnjn1-T","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/yourLinuxGuy.com\/index.php?rest_route=\/wp\/v2\/posts\/55","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/yourLinuxGuy.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/yourLinuxGuy.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/yourLinuxGuy.com\/index.php?rest_route=\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/yourLinuxGuy.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=55"}],"version-history":[{"count":2,"href":"https:\/\/yourLinuxGuy.com\/index.php?rest_route=\/wp\/v2\/posts\/55\/revisions"}],"predecessor-version":[{"id":57,"href":"https:\/\/yourLinuxGuy.com\/index.php?rest_route=\/wp\/v2\/posts\/55\/revisions\/57"}],"wp:attachment":[{"href":"https:\/\/yourLinuxGuy.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=55"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/yourLinuxGuy.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=55"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/yourLinuxGuy.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=55"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}