Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
mod_ssl key locations?
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
Naughtyus
Guru
Guru


Joined: 14 Jul 2002
Posts: 463
Location: Vancouver, BC

PostPosted: Tue Jul 16, 2002 7:56 am    Post subject: mod_ssl key locations? Reply with quote

I can't seem to figure out how to get my own openssl keys to work in mod_ssl. All I should really have to do is copy the keys to the dir that mod_ssl will look in, right? (What dir might that be?)
Back to top
View user's profile Send private message
rac
Bodhisattva
Bodhisattva


Joined: 30 May 2002
Posts: 6553
Location: Japanifornia

PostPosted: Tue Jul 16, 2002 8:13 am    Post subject: Re: mod_ssl key locations? Reply with quote

Naughtyus wrote:
(What dir might that be?)

Is /etc/apache/conf/ssl what you are looking for?
_________________
For every higher wall, there is a taller ladder
Back to top
View user's profile Send private message
Naughtyus
Guru
Guru


Joined: 14 Jul 2002
Posts: 463
Location: Vancouver, BC

PostPosted: Wed Jul 17, 2002 6:05 am    Post subject: Reply with quote

It was.. But it turns out I'm also looking for server.csr - or how to create it :(

( from the manual:
Now you can use this CA to sign server CSR's in order to create real SSL Certificates for use inside an Apache webserver (assuming you already have a server.csr at hand):

$ ./sign.sh server.csr

)
Back to top
View user's profile Send private message
rac
Bodhisattva
Bodhisattva


Joined: 30 May 2002
Posts: 6553
Location: Japanifornia

PostPosted: Wed Jul 17, 2002 7:26 am    Post subject: Reply with quote

Naughtyus wrote:
I'm also looking for server.csr - or how to create it :(

Would /usr/lib/ssl/mod_ssl/gid-mkcert.sh be of some assistance?
_________________
For every higher wall, there is a taller ladder
Back to top
View user's profile Send private message
Naughtyus
Guru
Guru


Joined: 14 Jul 2002
Posts: 463
Location: Vancouver, BC

PostPosted: Wed Jul 17, 2002 8:50 am    Post subject: Reply with quote

It most certainly would - thanks!

Now.. I assume I must still have missed something (of course..). I've created and signed my certificates and keys, and moved them to /etc/apache/lib/ssl/mod_ssl as well as /conf/ssl
as well as ca.db.certs. I've overwritten &/or renamed all of the old files. For some reason though, Apache is still using the 'test' key/certs...
Back to top
View user's profile Send private message
rac
Bodhisattva
Bodhisattva


Joined: 30 May 2002
Posts: 6553
Location: Japanifornia

PostPosted: Wed Jul 17, 2002 8:59 am    Post subject: Reply with quote

Naughtyus wrote:
Apache is still using the 'test' key/certs...

Hmm. Strange. I'm assuming you restarted Apache. Could you double-check that the key files it's looking for as specified in /etc/apache/conf/vhosts/ssl.default-vhost.conf are the ones you want it to be looking for? If you get frustrated, maybe
Code:
# strace -eopen -f apache -X
will tell you what files Apache is really trying to open.
_________________
For every higher wall, there is a taller ladder
Back to top
View user's profile Send private message
Naughtyus
Guru
Guru


Joined: 14 Jul 2002
Posts: 463
Location: Vancouver, BC

PostPosted: Wed Jul 17, 2002 9:03 am    Post subject: Reply with quote

Amazing response time. :)

Checking that right now
Back to top
View user's profile Send private message
Naughtyus
Guru
Guru


Joined: 14 Jul 2002
Posts: 463
Location: Vancouver, BC

PostPosted: Wed Jul 17, 2002 9:22 am    Post subject: Reply with quote

:D

That got it!
Thank you very much for helping me out!
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum