We'll do our Apache install from the ports. I'll demonstrate an install from sources later.
our systems only require two additional packages for this install.
mm-1.2.1.tgz
- a memory management library
apache+mod_ssl-1.3.27+2.8.14.tgz
- The apache+modssl package
ftp them from:
noc.ws.afnog.org
so what are these packages?
What are the package requirements for apache?
What files are in the apache package?
wow thats a few, try using less...
Ok, now we're ready to install...
Ok, lets go look at the configuration.
in some directory, do:
generate an rsa key
if you want to remove the password from the private key (aftewrwards use server.pem for everything)
generate a csr for the purpose of getting the key signed or generating a self signed cert
generate a short lived cert
http://slacksite.com/apache/certificate.html
pkg_info mm-1.2.1.tgz
pkg_info apache+mod_ssl-1.3.27+2.8.14.tgz
pkg_info -r apache+mod_ssl-1.3.27+2.8.14.tgz
pkg_add mm-1.2.1.tgz
pkg_add apache+mod_ssl-1.3.27+2.8.14.tgz
Quick and Dirty SSL Certificate Generation
openssl genrsa -des3 -out server.key 1024
openssl rsa -in server.key -out server.pem
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 60 -in server.csr -signkey server.key -out server.crt
References: