files
|
#tomcat.sh1.txt#,
Certificate-log.txt,
apache-tomcat.txt,
apache_start.c.txt,
apache_stop.c.txt,
cjdk1.1.txt,
cjdk1.2.txt,
cjdk1.3.txt,
cshrc.txt,
do_env.txt,
http.conf-init.txt,
httpd-conf-first.txt,
httpd-jkl,
httpd-jkl-init.txt,
httpd-jkl.txt,
httpd.conf.txt,
httpd.jkl.txt,
jspc.sh.txt,
junk,
killme.c.txt,
mod_jk.so,
mod_jk_conf_init.txt,
server.xml.init.txt,
setmyenv.txt,
shutdown.sh.txt,
startup-mess.txt,
startup.sh.txt,
tomcat.sh.txt,
tomcat.sh1.txt,
workers_properties_init.txt
|
|
|
cd /etc/httpd/conf
mkdir old-keys
mv ssl* old-keys
mkdir ssl.key
mkdir ssl.csr
mkdir ssl.crt
make genkey
/usr/bin/openssl genrsa -des3 1024 > /etc/httpd/conf/ssl.key/server.key
warning, not much extra random data, consider using the -rand option
Generating RSA private key, 1024 bit long modulus
..............++++++
...........++++++
e is 65537 (0x10001)
Enter PEM pass phrase:
Verifying password - Enter PEM pass phrase:
openssl rsa -in ssl.key/server.key -out ssl.key/server.key.unse cure
read RSA key
Enter PEM pass phrase:
writing RSA key
cp ssl.key/server.key.unsecure ssl.key/server.key
cp: overwrite `ssl.key/server.key'? y
make certreq
/usr/bin/openssl req -new -key /etc/httpd/conf/ssl.key/server.key -out /etc/httpd/conf/ssl.csr/server.csr
Using configuration from /usr/share/ssl/openssl.cnf
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:US
State or Province Name (full name) [Some-State]:Ohio
Locality Name (eg, city) []:Columbus
Organization Name (eg, company) [Internet Widgits Pty Ltd]:OSC
Organizational Unit Name (eg, section) []:CCL
Common Name (eg, your name or your server's hostname) []:my.server.machine.com
Email Address []:jkl@ccl.net
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
make testcert
/usr/bin/openssl req -new -key /etc/httpd/conf/ssl.key/server.key -x509 -days 365 -out /etc/httpd/conf/ssl.crt/server.crt
Using configuration from /usr/share/ssl/openssl.cnf
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:US
State or Province Name (full name) [Some-State]:Ohio
Locality Name (eg, city) []:Columbus
Organization Name (eg, company) [Internet Widgits Pty Ltd]:OSC
Organizational Unit Name (eg, section) []:CCL
Common Name (eg, your name or your server's hostname) []:my.server.machine.com
Email Address []:jkl@ccl.net
exit
|