Comments on: How to create your own SSL Certificate http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/ The freshest & hottest solutions, not just pointless and endless discussions. Finally a tech blog you can use! Thu, 25 Feb 2010 21:50:38 +0000 http://wordpress.org/?v=2.8.5 hourly 1 By: Ed http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/comment-page-1/#comment-149283 Ed Thu, 14 Jan 2010 20:26:25 +0000 http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/#comment-149283 Just FYI, in some environments (RHEL, centos, etc) the certs are in /etc/pki/tls/private and /etc/pki/tls/certs Just FYI, in some environments (RHEL, centos, etc) the certs are in /etc/pki/tls/private and /etc/pki/tls/certs

]]> By: How to create your own SSL Certificate | Yet another Tech Blog | Scott’s Reference Files http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/comment-page-1/#comment-144916 How to create your own SSL Certificate | Yet another Tech Blog | Scott’s Reference Files Mon, 19 Oct 2009 02:50:55 +0000 http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/#comment-144916 [...] How to create your own SSL Certificate | Yet another Tech BlogTopic: Computer| No Comments » How to create your own SSL Certificate | Yet another Tech Blog. [...] [...] How to create your own SSL Certificate | Yet another Tech BlogTopic: Computer| No Comments » How to create your own SSL Certificate | Yet another Tech Blog. [...]

]]> By: james Eilers » Project Management with Trac + SVN http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/comment-page-1/#comment-144547 james Eilers » Project Management with Trac + SVN Thu, 08 Oct 2009 21:19:41 +0000 http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/#comment-144547 [...] everything to use SSL.  A very nice tutorial on creating your self-signed certificate can be found here.  Also ensure that you have mod_ssl installed for Apache.  Everything else is configured within [...] [...] everything to use SSL.  A very nice tutorial on creating your self-signed certificate can be found here.  Also ensure that you have mod_ssl installed for Apache.  Everything else is configured within [...]

]]> By: Guy http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/comment-page-1/#comment-143509 Guy Mon, 14 Sep 2009 15:41:35 +0000 http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/#comment-143509 If you really want to simplify everything I downloaded some scripts, a few years ago, that will generate everything. When I found them they generated 1024-bit encryption - I modified them so that, now, they are 4096 bit encryption. These really make the whole process brain-dead. These work with GoDaddy.com's new, mandatory minimum of 2048 bit or higher encryption - I just edited them, made new certificates, and bought a new certificate yesterday. if you would like to use them, her ya' go.... http://guycentral.info/index.php/apache-linux. If you really want to simplify everything I downloaded some scripts, a few years ago, that will generate everything. When I found them they generated 1024-bit encryption – I modified them so that, now, they are 4096 bit encryption. These really make the whole process brain-dead. These work with GoDaddy.com’s new, mandatory minimum of 2048 bit or higher encryption – I just edited them, made new certificates, and bought a new certificate yesterday. if you would like to use them, her ya’ go….

http://guycentral.info/index.php/apache-linux.

]]> By: Stage @ Aventiv » Dag 54: Client Fails! http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/comment-page-1/#comment-137296 Stage @ Aventiv » Dag 54: Client Fails! Tue, 26 May 2009 20:06:05 +0000 http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/#comment-137296 [...] probleem en deze hebben we alsnog kunnen oplossen door een self signed certificaat te generen via opensll op linux. Toen we de client dan probeerden te runnen dan werd het e-mail en het fileserver laben gevalideerd [...] [...] probleem en deze hebben we alsnog kunnen oplossen door een self signed certificaat te generen via opensll op linux. Toen we de client dan probeerden te runnen dan werd het e-mail en het fileserver laben gevalideerd [...]

]]> By: The Magnet Blog » Blog Archive » creating a ssl certificate http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/comment-page-1/#comment-117462 The Magnet Blog » Blog Archive » creating a ssl certificate Thu, 06 Nov 2008 08:45:25 +0000 http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/#comment-117462 [...] www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/ [...] [...] http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/ [...]

]]> By: Tony http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/comment-page-1/#comment-116819 Tony Fri, 31 Oct 2008 04:35:57 +0000 http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/#comment-116819 Yes it can be, except your visitors will receive an error when visiting your site saying that there is something wrong. In both IE7 and Firefox 3 they will be STRONGLY ADVISED not to enter, and will have to import the key into their browser for connection to continue. In other words, pay for a proper one or you'll look dodgy. Yes it can be, except your visitors will receive an error when visiting your site saying that there is something wrong. In both IE7 and Firefox 3 they will be STRONGLY ADVISED not to enter, and will have to import the key into their browser for connection to continue.

In other words, pay for a proper one or you’ll look dodgy.

]]> By: Craig http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/comment-page-1/#comment-115899 Craig Wed, 22 Oct 2008 18:24:09 +0000 http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/#comment-115899 Can this be used for a live production e-commerce site? Can this be used for a live production e-commerce site?

]]> By: sjmiller http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/comment-page-1/#comment-108304 sjmiller Thu, 05 Jun 2008 06:36:42 +0000 http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/#comment-108304 Brilliant instructions. Thank you! Brilliant instructions. Thank you!

]]> By: Laxman singh http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/comment-page-1/#comment-108129 Laxman singh Wed, 28 May 2008 14:18:03 +0000 http://www.yatblog.com/2007/02/27/how-to-create-a-ssl-certificate/#comment-108129 Thanks, vary straight through how to create certificate, and implemented with vhost. The steps involved in creating self-signed authority under Ubuntu. Here is the very simple way of creating a Self signed certificate. enter the command as follows to generate a certificate valid for 365 days sudo apache2-ssl-certificate -days 365 The program asks for few inputs. Please enter as required. It is shown below Country Name (2 letter code) [GB]: State or Province Name (full name) [Some-State]: Locality Name (eg, city) []:Singapore Organization Name (eg, company; recommended) []: Organizational Unit Name (eg, section) []: server name (eg. ssl.domain.tld; required!!!) []:enter your domain name here Email Address []: Now you should have your certificate ready to use. (NOTE: Ubuntu Feisty has a bug where the command apache2-ssl-certificate is missing. This is a well documented bug. Here is the file you need to download to overcome this defect to create a self signed certificate. After you download, follow the notes below to copy the downloaded files to the location where they are supposed to be present. Extract the package and put ssleay.cnf to /usr/share/apache2/ and apache2-ssl-certificate to /usr/sbin. Create /etc/apache2/ssl directory. Then apache2-ssl-certificate script should work.) Once you have your certificate ready, then you need to configure you apache2.conf file. In this case, the configuration is very simple. Here is an example on how to do it: NameVirtualHost *:443 ServerAdmin webmaster@localhost ServerName securedomain ServerAlias securedomain www.domain3.com DocumentRoot /var/www/ssl_securearea SSLEngine On SSLCertificateFile /etc/apache2/ssl/apache.pem Options -Indexes FollowSymLinks MultiViews AllowOverride None Order allow,deny allow from all above i have shown the whole virtual host configuration to be complete. But i hope you get an idea where to put it. On Ubuntu need this step to recover the missing command apache2-ssl-certificate is missing. Here is the file you need to download to overcome this defect to create a self signed certificate. After you download, follow the notes below to copy the downloaded files to the location where they are supposed to be present. 1. Extract the package 2. put ssleay.cnf to /usr/share/apache2/ 3. put apache2-ssl-certificate to /usr/sbin. 4. Create /etc/apache2/ssl directory. Now apache2-ssl-certificate script should work. http://librarian.launchpad.net/7477840/apache2-ssl.tar.gz after downloading & following step certificate worked. Thanks,

vary straight through how to create certificate, and implemented with vhost.

The steps involved in creating self-signed authority under Ubuntu.

Here is the very simple way of creating a Self signed certificate.
enter the command as follows to generate a certificate valid for 365 days
sudo apache2-ssl-certificate -days 365

The program asks for few inputs. Please enter as required. It is shown below

Country Name (2 letter code) [GB]:

State or Province Name (full name) [Some-State]:

Locality Name (eg, city) []:Singapore
Organization Name (eg, company; recommended) []:

Organizational Unit Name (eg, section) []:
server name (eg. ssl.domain.tld; required!!!) []:enter your domain name here

Email Address []:

Now you should have your certificate ready to use.

(NOTE: Ubuntu Feisty has a bug where the command apache2-ssl-certificate is missing. This is a well documented bug. Here is the file you need to download to overcome this defect to create a self signed certificate. After you download, follow the notes below to copy the downloaded files to the location where they are supposed to be present.

Extract the package and put ssleay.cnf to /usr/share/apache2/ and apache2-ssl-certificate to /usr/sbin.
Create /etc/apache2/ssl directory. Then apache2-ssl-certificate script should work.)

Once you have your certificate ready, then you need to configure you apache2.conf file. In this case, the configuration is very simple. Here is an example on how to do it:

NameVirtualHost *:443

ServerAdmin webmaster@localhost
ServerName securedomain
ServerAlias securedomain http://www.domain3.com
DocumentRoot /var/www/ssl_securearea

SSLEngine On
SSLCertificateFile /etc/apache2/ssl/apache.pem

Options -Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all

above i have shown the whole virtual host configuration to be complete. But i hope you get an idea where to put it.

On Ubuntu need this step to recover the missing command apache2-ssl-certificate is missing.

Here is the file you need to download to overcome this defect to create a self signed certificate. After you download, follow the notes below to copy the downloaded files to the location where they are supposed to be present.
1. Extract the package
2. put ssleay.cnf to /usr/share/apache2/
3. put apache2-ssl-certificate to /usr/sbin.
4. Create /etc/apache2/ssl directory.
Now apache2-ssl-certificate script should work.

http://librarian.launchpad.net/7477840/apache2-ssl.tar.gz

after downloading & following step certificate worked.

]]>