https

The purpose of this document is to show how to make a website into an https website.

  • vim /etc/httpd/conf.d/02_www.conf

102 Include conf.d/include/ssl.conf 103 SSLCertificateFile /etc/httpd/conf/ssl.crt/www.jgspratt.com.crt 104 SSLCertificateKeyFile /etc/httpd/conf/ssl.key/www.jgspratt.com.key 105 SSLCertificateChainFile /etc/httpd/conf/ssl.crt/ca.crt domain="jgspratt.com" ; openssl req -nodes -newkey rsa:4096 -keyout "${domain}".key -out "${domain}".csr

    • This will generate a .csr and a .key file. Submit the .csr to the CA and wait for the .crt.

    • Download the .crt file and the bundle (often ca.crt) file from the CA.

    • Install the .key file from the CSR generation to /etc/httpd/conf/ssl.key/www.jgspratt.com.key

    • Install the .crt to /etc/httpd/conf/ssl.key/www.jgspratt.com.key

    • Install the ca.crt to /etc/httpd/conf/ssl.crt/ca.crt

    • Restart Apache

[Edit]