Apache + ModSSL + OpenSSL
Installing your Web Server Certificate
Your certificate will be sent to you by email. The email message includes the web server certificate that you purchased in the body of the email message.
Copy the certificate from the body of the email and paste it into a text editor (such as notepad) to create text files.
If you have not already set up a secure virtual host or would like to learn
more about installing SSL, refer to the following link for more information:http://www.linuxdoc.org/HOWTO/SSL-RedHat-HOWTO.html#toc4![]()
Note: The examples below use the following naming conventions: "Your Private Key" = "domainname.key"; "Your Web Server Certificate" = "domainname.crt"
Copy the certificate to the Apache server directory in which you plan to store your certificates:
/usr/local/apache/conf/ssl.crt/Or
/etc/httpd/conf/ssl.crt/
Note: Copy the entire contents of the certificate from including:
-----BEGIN CERTIFICATE-----And
-----END CERTIFICATE-----
Open the httpd.conf file in a text editor.
Locate the secure virtual host pertaining to your order. You should have the following directives within this virtual host. Please add them if they are not present:
SSLCertificateFile /usr/local/apache/conf/ssl.crt/domainname.crt (or server.crt) SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/domainname.key (or server.key)
Save the changes and exit the editor.
Start or Restart your apache web server using one of the following commands:
/usr/local/apache/bin/apachectl startsslOr
/usr/local/apache/bin/apachectl restart
Other commands:
/usr/sbin/httpd startssl or restart
/usr/sbin/httpsd startssl or restart
Note: You may refer to the original ModSSL instructions
at: http://www.modssl.org/source/exp/mod_ssl/pkg.mod_ssl/INSTALL
Test your certificate by using a browser to connect to your server. Use the https protocol directive (e.g. https://yourserver.com/) to indicate you wish to use secure HTTP.
Note: The padlock icon
on your browser will be displayed in the locked position if your certificates are installed correctly and the server is properly configured for SSL.










