re my last post here is an easy guide to cert generation

do the following:-

cd /usr/local/ssl/bin

./openssl req -new > new.cert.csr
./openssl rsa -in privkey.pem -out new.cert.key
./openssl x509 -in new.cert.csr -out new.cert.vert -req -signkey
new.cert.key -days 365

the above creates a cert key for 365 days only a new key will need to be
generated after that time..

then do

cp new.cert.key /usr/local/apache/conf/ssl.key/server.key
cp new.cert.cert /usr/local/apache/conf/ssl.crt/server.crt

then start apache and away you go ..

Nige
----- Original Message -----
From: "George Toft" <george@georgetoft.com>
To: <plug-discuss@lists.plug.phoenix.az.us>
Sent: Sunday, March 03, 2002 9:05 PM
Subject: Re: : apache ssl install


> I presume downloading the SSL-enabled rpm is out of the question?
> I fought with the tarballs for the better part of a day, said screw
> it, downloaded the rpm and was done with it an hour later (including
> cert generation and installation).
>
> George
>
>
>
> Eric wrote:
> >
> > Hi,
> >
> > I'm following "Apache: the definitive guide," and I'm trying to install
> > apache 1.3.22 with ssl.  The book says to
> >
> > i)      build SSLeay (openssl),
> > ii)     then exand the apache tar ball,
> > iii)    then in the parent directory of apache, expand apache+ssl patch
> > iv)     then do "./FixPatch".
> >
> > Fixpatch concludes by telling me to rebuild openssl again, but the book
> > clearly implies that this is not to be done.  Rather, the book says to
go on
> > and re-build apache.
> >
> > Has anyone done this lately?  Do I need to rebuild SSL after building 5
> > minutes ago?  I'm using openssl 0.9.5a and
apache_1.3.22+ssl_1.44.tar.gz.
> >
> > Eric
> >
> > ________________________________________________
> > See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't
post to the list quickly and you use Netscape to write mail.
> >
> > PLUG-discuss mailing list  -  PLUG-discuss@lists.plug.phoenix.az.us
> > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't
post to the list quickly and you use Netscape to write mail.
>
> PLUG-discuss mailing list  -  PLUG-discuss@lists.plug.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>