Configuring SSL with Apache

Discussion in 'OT Technology' started by Sexual Vanilla, Feb 26, 2007.

  1. Sexual Vanilla

    Sexual Vanilla New Member

    Joined:
    May 23, 2005
    Messages:
    6,305
    Likes Received:
    0
    Location:
    South Carolina
    Hello All,

    I'm running XAMPP on an XP machine, and am trying to set up SSL. I've searched the web for countless hours on a tutorial for doing this seemingly common task, but I've found nothing that can help.

    I'm not completely starting from scratch, as XAMPP includes OpenSSL. I've generated my CSR and have submitted it to CACERT, which has now given me a free server certificate. What do I do now? I'm completely lost. :wtc:
     
  2. Slid.

    Slid. I'm a guy.

    Joined:
    Oct 25, 2001
    Messages:
    1,928
    Likes Received:
    0
    Location:
    NH
    Apache 1.3, 2.0 or 2.2?
     
  3. Slid.

    Slid. I'm a guy.

    Joined:
    Oct 25, 2001
    Messages:
    1,928
    Likes Received:
    0
    Location:
    NH
    Hrm, well, you'll need these three lines completed (with proper paths) in either your httpd.conf or httpd-ssl.conf file (depending on Apache version):

    SSLCertificateFile /opt/apache2/conf/ssl.crt/www.site.com.crt
    SSLCertificateKeyFile /opt/apache2/conf/ssl.key/www.site.com.key
    SSLCertificateChainFile /opt/apache2/conf/ssl.crt/sf_issuing.crt

    Those lines are an example of an Apache 2.2 install in /opt/apache2/ on Solaris. For a Windows based install you'd use a Windowsy style path "c:\apache\conf\" depending on your install location.
     
  4. Sexual Vanilla

    Sexual Vanilla New Member

    Joined:
    May 23, 2005
    Messages:
    6,305
    Likes Received:
    0
    Location:
    South Carolina
    I'm using Apache 2.2.3. Thanks for the help thus far. Any other tokens of advice would helpful!
     
  5. Slid.

    Slid. I'm a guy.

    Joined:
    Oct 25, 2001
    Messages:
    1,928
    Likes Received:
    0
    Location:
    NH
    Don't worry about having nothing turn up on Google for SSL for Apache 2.2.3, the info. for the latest version is pretty bare right now. If you setup those paths to your three cert files (they should be named in a similar fashion) and restart Apache you should be golden.

    IF you make these changes in an httpd-ssl.conf file then you MAY have to uncomment the httpd-ssl.conf refernce in your httpd.conf file.

    A default setup might look like:
    Code:
    # Secure (SSL/TLS) connections
    #Include conf/extra/httpd-ssl.conf
    
    It should be:
    Code:
    # Secure (SSL/TLS) connections
    Include conf/extra/httpd-ssl.conf
    
    Again, using Windows pathing.

    Starting with Apache 2.2 you no longer +need a startssl argument so don't worry about everything that says you need it.
     
  6. Sexual Vanilla

    Sexual Vanilla New Member

    Joined:
    May 23, 2005
    Messages:
    6,305
    Likes Received:
    0
    Location:
    South Carolina
    Awesome, thanks for the help. I'll give it a shot and report back.
     

Share This Page