 |
| rng prototype (Photo credit: Dick Thomas) |
1st you will need your files from StartSSL
I ended up with a www.key, www.crt, sub.class1.server.ca.pem and ca.pem files
while using the example at Apache + startssl does work, it requires a password typing during the startup of apache to de-encrypt the encrypted key files, while this is great for security, but when trying to use two key files with a password apache just asks for the one and ignores the others
so I removed the password from the key file and made it in to a plain pem file, and configure apache in one file
openssl rsa -in www.key -out www.pem
/etc/apache2/Ports.conf
NameVirtualHost *:80 Listen 80 Listen 443 NameVirtualHost *:443 SSLStrictSNIVHostCheck off/etc/apache2/sites-available/default-ssl
<VirtualHost *:443>
ServerName www.exapmple.com
ServerAdmin email@example.com
SSLEngine on
SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM
SSLCertificateFile /etc/apache2/ssl/www.crt
SSLCertificateKeyFile /etc/apache2/ssl/www.pem
SSLCertificateChainFile /etc/apache2/ssl/sub.class1.server.ca.pem
SSLCACertificateFile /etc/apache2/ssl/ca.pem
...
rest of normal config
...
</VirtualHost>
<VirtualHost *:443>
ServerName gallery.example.com
ServerAdmin webmaster@example.com
SSLEngine on
SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM
SSLCertificateFile /etc/apache2/ssl/gallery.crt
SSLCertificateKeyFile /etc/apache2/ssl/gallery.pem
SSLCertificateChainFile /etc/apache2/ssl/sub.class1.server.ca.pem
SSLCACertificateFile /etc/apache2/ssl/ca.pem
...
rest of normal config
...
</VirtualHost>
Then a restart of apache2 and loading any modules it requires and "job is good one"
Posts
