Keytool and SSL Apache config

Posted by Safari on Server Fault See other posts from Server Fault or by Safari
Published on 2013-11-13T14:57:15Z Indexed on 2013/11/13 15:59 UTC
Read the original article Hit count: 287

Filed under:
|
|
|

I have a question about SSL certificate...

I have generate a certificate using this keytool command..

keytool -genkey -alias myalias -keyalg RSA -keysize 2048

and I used this command to export the certificate

keytool -export -alias myalias -file certificate.crt

So, I have a file .crt

Now I would to configure my Apache ssl module.

I need to use keytool...At the moment I can't to use Openssl

How can I configure the module if I have only this certificate.crt file? I see these sections in my ssl.conf

#   Server Certificate:
# Point SSLCertificateFile at a PEM encoded certificate.  If
# the certificate is encrypted, then you will be prompted for a
# pass phrase.  Note that a kill -HUP will prompt again.  A new
# certificate can be generated using the genkey(1) command.
#SSLCertificateFile /etc/pki/tls/certs/localhost.crt

#   Server Private Key:
#   If the key is not combined with the certificate, use this
#   directive to point at the key file.  Keep in mind that if
#   you've both a RSA and a DSA private key you can configure
#   both in parallel (to also allow the use of DSA ciphers, etc.)
#SSLCertificateKeyFile /etc/pki/tls/private/localhost.key

#   Server Certificate Chain:
#   Point SSLCertificateChainFile at a file containing the
#   concatenation of PEM encoded CA certificates which form the
#   certificate chain for the server certificate. Alternatively
#   the referenced file can be the same as SSLCertificateFile
#   when the CA certificates are directly appended to the server
#   certificate for convinience.
#SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt

How can I configure the correct section?

© Server Fault or respective owner

Related posts about apache2

Related posts about ssl