First remove the original test certs.
Find their location as follows
cat /etc/httpd/conf.d/ssl.conf | grep ^SSLCert
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
Get rid of the current cert / key
rm -f /etc/pki/tls/certs/localhost.crt \
/etc/pki/tls/private/localhost.key
cd /etc/pki/tls/certs/
run
make testcert
Problem: make testcert asks for password!!!
Fix: Remove the password protected certs
rm -f /etc/pki/tls/certs/localhost.crt /etc/pki/tls/private/localhost.key
in /etc/pki/tls/certs/
Make a backup of Makefile
cp Makfile Makefile.orig
edit the following section
%.key:
umask 77 ; \
/usr/bin/openssl genrsa -des3 1024 > $@
Delete the -des3 argument so it looks as follows and save the Makefile
%.key:
umask 77 ; \
/usr/bin/openssl genrsa 1024 > $@
rerun make testcert
0 Comments