Prev | Current Page 503 | Next

Christopher Negus

"Linux Bible, 2008 Edition: Boot up to Ubuntu, Fedora, KNOPPIX, Debian, openSUSE, and 11 Other Distributions"

Secure data interchange can now occur.
Creating SSL Certificates
To create your own SSL certificate for secure HTTP data interchange, you must first have an SSLcapable
Web server. The Apache Web server (httpd package), which comes with Fedora and other
Linux systems, is SSL-capable. The following procedure for creating SSL certificates is done on a
Fedora system that includes Apache from the httpd-2.2.3-5 package. This procedure may be different
for Apache on other Linux systems.
Once you have a server ready to go, you should familiarize yourself with the important server-side
components of an SSL certificate:
# ls -l /etc/httpd/conf
-rw-r--r-- 1 root root 36010 Jul 14 15:45 httpd.conf
lrwxrwxrwx 1 root root 37 Aug 12 23:45 Makefile ->
../../../usr/share/ssl/certs/Makefile
drwx------ 2 root root 4096 Aug 12 23:45 ssl.crl
drwx------ 2 root root 4096 Aug 12 23:45 ssl.crt
drwx------ 2 root root 4096 Jul 14 15:45 ssl.csr
drwx------ 2 root root 4096 Aug 12 23:45 ssl.key
drwx------ 2 root root 4096 Jul 14 15:45 ssl.prm
# ls -l /etc/httpd/conf.d/ssl.conf
-rw-r--r-- 1 root root 11140 Jul 14 15:45 ssl.conf
The /etc/httpd/conf and /etc/httpd/conf.d directories contain all of the components
necessary to create your SSL certificate. Each component is defined as follows:
 httpd.


Pages:
491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515