Creating Certificates for Apache

The following steps are provided as an example for how to create two certificates for Apache:

  1. Using a DOS prompt, go to your Apache bin directory. (The default location is C:\Program Files\Novell\Apache\bin.)

    This is where the openssl.exe file is located.

  2. Create a key file using the following command:

    openssl genrsa -out myssl.key 1024

  3. Create a signing request file using the following command:

    openssl req -new -config openssl.cnf -key myssl.key -out myssl.csr

  4. Send the .csr file to a well-known certificate authority for signing, or self-sign the certificate using the following command:

    openssl x509 -req -days 30 -in myssl.csr -signkey myssl.key -out myssl.crt

    You should now have two (if you are creating a self-signed certificate) or three (if creating a certificate which is signed by a well-known certificate authority) files: myssl.key, myssl.crt, and possibly trustedroot.crt.

  5. Copy the two or three files to your Apache\conf\ssl directory. (The default location is: C:\Program Files\Novell\Apache\conf\ssl.)

  6. Repeat steps 1-5 to create the same two or three files for the common domain (mycommonssl.key, mycommonssl.crt, and trustedroot.crt). If they are signed by the same certificate authority, the trusted root certificate is the same as the one you created for myssl.crt.

  7. Modify your Apache configuration files. For examples of how to do this, see Modifying the Apache Configuration Files .