SupraLink Solutions
Internet Solutions Provider
7527 Papineau Avenue
Montréal, Québec
Canada H2E 2G9

Telephone: 514.906.1536
Fax: 514.906.1738
Driving Directions: Link to Yahoo Maps
Apache 2.x
Installing your Web Server Certificate

Your certificate will be sent to you by email. The email message includes the Web Server Certificate that you purchased in the body of the email message.

Copy the certificate from the body of the email and paste it into a text editor, such as notepad to create text files.

If you have not already set up a secure virtual host or would like to learn more about SSL, refer to the following link for more information:

http://www.linuxdoc.org/HOWTO/SSL-RedHat-HOWTO.html#toc4

Please note that the examples below use the following naming conventions:

  • Your Private Key = domainname.key
  • Your Web Server Certificate = domainname.crt
  1. Copy the certificate to the Apache server directory in which you plan to store your certificates.

    By default:

    /usr/local/apache/conf/ssl.crt/

    Other location:

    /etc/httpd/conf/ssl.crt/

    Please copy the entire contents of the certificate from and including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines.
  2. Open the Apache httpd.conf file in a text editor.
  3. Locate the SSL VirtualHost associated with your certificate. Verify that you have the following 2 directives within this virtual host. Please add them if they are not present:

    SSLCertificateFile /usr/local/apache/conf/ssl.crt/domainname.crt
    SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/domainname.key
    or
    SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt
    SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/server.key
  4. Save the changes and exit the editor.
  5. Start or Restart your Apache web server using one of the following commands:

    By default:

    /usr/local/apache/bin/apachectl startssl
    or
    /usr/local/apache/bin/apachectl restart
     

    Other commands:

    /usr/sbin/httpd startssl or restart
    or
    /usr/sbin/httpsd startssl or restart

Test your certificate by using a browser to connect to your server. Use the https protocol directive, such as https://your.server.com/ to indicate you wish to use secure HTTP.

Please note that the padlock icon on your browser will be displayed in the locked position if your certificates are installed correctly and the server is properly configured for SSL.

Innovating Information Security
SupraLink, in partnership with GeoTrust, the leading provider of next generation information security services, delivers secure e-commerce transactions, identity verification and authentication solutions to the global web community. SupraLink ensures a new level of e-business security — your first step toward leveraging the full business potential of the Internet.