Attempting to setup a https server in opensuse 12.1. Having difficulty creating a self-signed certificate using openssl. The internet examples of using openssl are obsolete. Any help would be appreciated.
On 07/10/2012 02:06 AM, Parthenolide wrote:
>
> The internet examples of using openssl are obsolete. Any help would be appreciated.
i have no idea how to make such a certificate, but i see your question
has been here for over five hours with no answers, so i throw this out
hoping to give you some helpful reading until someone who knows how,
stumbles through:
https://www.google.com/search?q=site:doc.opensuse.org+openssl+“self-signed+certificate”
if you find any of those helpful you might notice the ‘trick’ i used: i
didn’t search the entire internet, rather by using googles “site
specifier” i looked in only one small part of the openSUSE
universe…the documentation at doc.opensuse.org
hopefully someone will come along soon, but if not, and if you wish to
look deeper into the entire openSUSE universe, use this site specifier:
https://www.google.com/search?q=site%3Aopensuse.org+openssl+“self-signed+certificate”
–
dd
On 2012-07-10 07:46, dd@home.dk wrote:
> On 07/10/2012 02:06 AM, Parthenolide wrote:
>>
>> The internet examples of using openssl are obsolete. Any help would be
>> appreciated.
>
> i have no idea how to make such a certificate, but i see your question has
> been here for over five hours with no answers, so i throw this out hoping
> to give you some helpful reading until someone who knows how, stumbles
> through:
There is a similar post, recent, in the mail list:
Date: Sun, 1 Jul 2012 16:09:43 -0400
From: Ted Byers <>
To: opensuse@opensuse.org
Subject: [opensuse] where should I put self-signed certificates for Apache
2 in OpenSuse 12.1
–
Cheers / Saludos,
Carlos E. R.
(from 11.4 x86_64 “Celadon” at Telcontar)
On 07/10/12 10:03 am, Carlos E. R. thus wrote :
> On 2012-07-10 07:46, dd@home.dk wrote:
>> On 07/10/2012 02:06 AM, Parthenolide wrote:
>>>
>>> The internet examples of using openssl are obsolete. Any help would be
>>> appreciated.
>>
>> i have no idea how to make such a certificate, but i see your question has
>> been here for over five hours with no answers, so i throw this out hoping
>> to give you some helpful reading until someone who knows how, stumbles
>> through:
>
> There is a similar post, recent, in the mail list:
>
> Date: Sun, 1 Jul 2012 16:09:43 -0400
> From: Ted Byers <>
> To: opensuse@opensuse.org
> Subject: [opensuse] where should I put self-signed certificates for Apache
> 2 in OpenSuse 12.1
>
As I don’t use YaST for this stuff, but instead rely on the tried and
true Apache manual configuration & documentation, I would have a look at
http://www.tc.umn.edu/~brams006/selfsign.html and similar guides.
In most of my Apache installations (and I run Apache on three or four
different platforms), I put certs in the following locations in the
apache2 tree:
/conf (top level configuration)
/conf/extra (additional configuration files, including httpd-ssl.conf
and httpd-vhosts.conf)
/conf/ssl.crt (certificates go here)
/conf/ssl.csr (certificate signing requests go here)
/conf/ssl.key (key files go here)
Then, in httpd-ssl.conf, I have entries such as:
SSLEngine on
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /apache2/conf/ssl.crt/my-self-signed.crt
SSLCertificateKeyFile /apache2/conf/ssl.key/my-self-generated.key
SSLCertificateChainFile /apache2/conf/ssl.crt/my-cert-chain.crt
Of course, you can place this stuff anywhere as long as your paths are
correct in the configuration files and the httpd user can read them.
As for generating the cert(s), the link above should prove to be a good
guide. As I say, I run Apache on several platforms, and it’s all pretty
much the same (NetWare, Linux, OS/2).
GL