Operation Manual
TIP: For More Information
To learn more about concepts and denitions of SSL/TSL, refer to http://
httpd.apache.org/docs/2.2/ssl/ssl_intro.html.
20.6.1.1 Creating a “Dummy” Certicate
Generating a dummy certicate is simple. Just call the script
/usr/bin/gensslcert. It creates or overwrites the les listed below. Make use
of gensslcert's optional switches to ne-tune the certicate. Call
/usr/bin/gensslcert -h for more information.
•
/etc/apache2/ssl.crt/ca.crt
•
/etc/apache2/ssl.crt/server.crt
•
/etc/apache2/ssl.key/server.key
•
/etc/apache2/ssl.csr/server.csr
•
/root/.mkcert.cfg
A copy of ca.crt is also placed at /srv/www/htdocs/CA.crt for download.
IMPORTANT: For Testing Purposes Only
A dummy certicate should never be used on a production system. Only use
it for testing purposes.
20.6.1.2 Creating a Self-Signed Certicate
If you are setting up a secure Web server for an Intranet or for a dened circle of users,
it might be sufcient if you sign a certicate with your own certicate authority (CA).
Creating a self-signed certicate is an interactive nine-step process. Change into the
directory /usr/share/doc/packages/apache2 and run the following command:
./mkcert.sh make --no-print-directory /usr/bin/openssl
The Apache HTTP Server 391