ssl and apache

[maxwas]

Hello all,

I have a test box with ubuntu server with xubuntu-desktop running locally on my lan. I have been using the box for playing around with apache2. I have managed to get it up and running no probs with php, mysql, virtual hosts, userdirs, and ssi.

I would now like to have a shot at ssl but do not really know where to start. There is an ssl folder in /etc/apache2 but it is empty

Can anyone point me to a nice beginners tutorial. I have used all the tutorials on this forum to get me to the point i am now at, they have been great, so im sure there must be one somewhere

Thx in advance

Max

[heimo]

Try this one:
https://help.ubuntu.com/community/fo...er/apache2/SSL

[maxwas]

Fantastic!!

Thanks very much

[maxwas]

Ok, i used the guide and it worked a treat - this was done on a box running ubuntu server with a default LAMP install. Only one minor difficulty, when i open up the browser running on the box and:

https://localhost

it works fine.

Now when i go to another box on the lan and try:

https://<server_ip>

apache returns an unexpected error (and code), is there any way to get around this?

Another problem i have is i have ubuntu 6.10 running on another machine under vmware. I have LAMP installed on this as well, but it was installed using this command:

sudo apt-get install apache2 php5 mysql-client-5.0 mysql-server-5.0 php5-mysql libapache2-mod-php5 libapache2-mod-auth-mysql

when i try to follow the ssl howto, the command:

apache2-ssl-certificate -days 365

will not work is there perhaps something i missed in my install?

Many thx

Max

[darrenm]

Ref problem 2. Does it say apache2-ssl-certificate not found?

Seems to be missing from the current build package.

[maxwas]

yep,

bash: apache2-ssl-certificate: command not found

I have tried comparing the ubuntu server install with the manual install and all the same stuff seems to be there.

Thx

[darrenm]

Theres a bug report for Feisty https://bugs.launchpad.net/ubuntu/+s...he2/+bug/77675 so Im not sure why its happening on Edgy.

[MadeR]

quick workaround taken from debian bug tracker:

sudo mkdir /etc/apache2/ssl
sudo /usr/sbin/make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/apache2/ssl/apache.pem

[Shane N]

Originally Posted by MadeR quick workaround taken from debian bug tracker: sudo mkdir /etc/apache2/ssl sudo /usr/sbin/make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/apache2/ssl/apache.pem

Building on this, if you add the following line to $HOME/.profile, you'll be able to simply run apache2-ssl-certificate as if it were installed (you'll need to log out/in to make it work the first time):

alias apache2-ssl-certificate='sudo /usr/sbin/make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/apache2/ssl/apache.pem'

[mathieubill]

Originally Posted by Shane N Building on this, if you add the following line to $HOME/.profile, you'll be able to simply run apache2-ssl-certificate as if it were installed (you'll need to log out/in to make it work the first time):

Except that this command issues a certificate valid for only one month.
In the original script apache2-ssl-certificate, you could pass a -days xxx as an argument. With the debian script, you can't. I am currently looking for a solution for this.