Create a Apache SSL Certificate for Fedora 7

Written by James McDonald

June 15, 2007

First remove the original test certs.
Find their location as follows

cat /etc/httpd/conf.d/ssl.conf | grep ^SSLCert
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key

Get rid of the current cert / key

rm -f /etc/pki/tls/certs/localhost.crt \
/etc/pki/tls/private/localhost.key


cd /etc/pki/tls/certs/

run
make testcert

Problem: make testcert asks for password!!!

Fix: Remove the password protected certs
rm -f /etc/pki/tls/certs/localhost.crt /etc/pki/tls/private/localhost.key
in /etc/pki/tls/certs/
Make a backup of Makefile
cp Makfile Makefile.orig
edit the following section
%.key:
umask 77 ; \
/usr/bin/openssl genrsa -des3 1024 > $@

Delete the -des3 argument so it looks as follows and save the Makefile
%.key:
umask 77 ; \
/usr/bin/openssl genrsa 1024 > $@

rerun make testcert

0 Comments

Submit a Comment

Your email address will not be published. Required fields are marked *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

The reCAPTCHA verification period has expired. Please reload the page.

You May Also Like…