Keytool and SSL Apache config
Posted
by
Safari
on Server Fault
See other posts from Server Fault
or by Safari
Published on 2013-11-13T14:57:15Z
Indexed on
2013/11/13
15:59 UTC
Read the original article
Hit count: 287
I have a question about SSL certificate...
I have generate a certificate using this keytool command..
keytool -genkey -alias myalias -keyalg RSA -keysize 2048
and I used this command to export the certificate
keytool -export -alias myalias -file certificate.crt
So, I have a file .crt
Now I would to configure my Apache ssl module.
I need to use keytool...At the moment I can't to use Openssl
How can I configure the module if I have only this certificate.crt file? I see these sections in my ssl.conf
# Server Certificate:
# Point SSLCertificateFile at a PEM encoded certificate. If
# the certificate is encrypted, then you will be prompted for a
# pass phrase. Note that a kill -HUP will prompt again. A new
# certificate can be generated using the genkey(1) command.
#SSLCertificateFile /etc/pki/tls/certs/localhost.crt
# Server Private Key:
# If the key is not combined with the certificate, use this
# directive to point at the key file. Keep in mind that if
# you've both a RSA and a DSA private key you can configure
# both in parallel (to also allow the use of DSA ciphers, etc.)
#SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
# Server Certificate Chain:
# Point SSLCertificateChainFile at a file containing the
# concatenation of PEM encoded CA certificates which form the
# certificate chain for the server certificate. Alternatively
# the referenced file can be the same as SSLCertificateFile
# when the CA certificates are directly appended to the server
# certificate for convinience.
#SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt
How can I configure the correct section?
© Server Fault or respective owner