Birmingham mumbai

[
 362 
]
To get the ball rolling, we'll need a directory to house our certificates. I'll use 
/etc/
apache2/certs
 in my examples, although you can use whatever directory you'd 
like, as long as you remember to update Apache's configuration with your desired 
location and filenames:
sudo mkdir /etc/apache2/certs 
For a self-signed certificate and key, we can generate the pair with the following 
command. Feel free to change the name of the key and certificate files to match the 
name of your website:
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout \ /
etc/apache2/certs/mysite.key -out /etc/apache2/certs/mysite.crt 
You'll be prompted to enter some information for generating the certificate. Answer 
each prompt as they come along. Here's a list of the questions you'll be asked, along 
with my responses for each. Change the answers to fit your server, environment, 
organization name, and location:
Country Name (2 letter code) [AU]:US 
State or Province Name (full name) [Some-State]:Michigan 
Locality Name (eg, city) []:Detroit 
Organization Name (eg, company) [Internet Widgits Pty Ltd]:My Company 
Organizational Unit Name (eg, section) []:IT 
Common Name (e.g. server FQDN or YOUR name) []:myserver.mydomain.com 
Email Address []:[e-mail] 
Now, you should see that two files have been created in the 
/etc/apache2/certs
 
directory, 
mysite.crt
 and 
mysite.key
, which represent the certificate and private 
key, respectively. Now that these files have been generated, the next thing for us to 
do is to configure Apache to use them. Look for the following two lines in the 
/etc/
apache2/sites-available/default-ssl.conf
 file:
SSLCertificateFile       /etc/ssl/certs/ssl-cert-snakeoil.pem 
SSLCertificateKeyFile  /etc/ssl/private/ssl-cert-snakeoil.key 
Comment these lines out by placing a 
#
 symbol in front of both:
# SSLCertificateFile      /etc/ssl/certs/ssl-cert-snakeoil.pem 
# SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key 

---

Chapter 14