| Apache 2.x |
| Installing your Web Server Certificate |
Your certificate will be sent to you by email. The email message includes the
Web Server Certificate that you purchased in the body of the email message.
Copy the certificate from the body of the email and paste it into a text editor,
such as notepad to create text files.
If you have not already set up a secure virtual host or would like to learn more about SSL, refer to the following link for more information:
http://www.linuxdoc.org/HOWTO/SSL-RedHat-HOWTO.html#toc4
Please note that the examples below use the following naming conventions:
- Your Private Key = domainname.key
- Your Web Server Certificate = domainname.crt
- Copy the certificate
to the Apache server directory in which you plan to store your certificates.
By default:
/usr/local/apache/conf/ssl.crt/
Other location:
/etc/httpd/conf/ssl.crt/
Please copy the entire contents of the certificate from and
including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines.
- Open the Apache httpd.conf file in a text editor.
- Locate the SSL VirtualHost associated with your certificate. Verify that you have the following 2 directives within this virtual host. Please add them if they are not present:
SSLCertificateFile /usr/local/apache/conf/ssl.crt/domainname.crt
SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/domainname.key
or
SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt
SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/server.key
- Save the changes and exit the editor.
- Start or Restart
your Apache web server using one of the following commands:
By default:
/usr/local/apache/bin/apachectl startssl
or
/usr/local/apache/bin/apachectl restart
Other commands:
/usr/sbin/httpd startssl or restart
or
/usr/sbin/httpsd startssl or restart
Test your certificate by using a browser to connect to your server. Use the https protocol directive,
such as https://your.server.com/ to indicate you wish to use secure HTTP.
Please note that the padlock icon on your browser will be displayed in the locked position if your certificates are installed correctly and the server is properly configured for SSL.
Innovating Information Security
SupraLink, in partnership with GeoTrust, the leading provider of next
generation information security services, delivers secure e-commerce
transactions, identity verification and authentication solutions to
the global web community. SupraLink ensures a new level of
e-business security — your first step toward leveraging the full
business potential of the Internet.
|