Hi, all!
I have a question on subj. As I read in book, SSL can be installed with apache so that all pages will be protected.
I have a server --with-openssl. But there is no messages bout certificates, or icon of secure zone in IE...
I wat to ask how can I protect concrete area of web-site using SSL? Or give me plz link on documentation... etc.
thanx...
SSL
Moderator: General Moderators
You need to generate a private key and a cert and configure this for the webareas in httpd.conf.
Assuming you are using apache 1.3.x and mod_ssl take a look here
With Apache 2 its a bit easier as mod_ssl is included and sample configs already included in httpd.conf, for 2.0 take a look here.
Keep in mind that SSL does not secure anything on the server nor the server itself, all SSL does is providing an encrypted connection between the server and the client. (and possible verification of server identity with a signed cert).
If it is a public website doing commerce stuff you likely need a cert signed by a commonly trusted issuer, such as Equifax (GeoTrust)
Assuming you are using apache 1.3.x and mod_ssl take a look here
With Apache 2 its a bit easier as mod_ssl is included and sample configs already included in httpd.conf, for 2.0 take a look here.
Keep in mind that SSL does not secure anything on the server nor the server itself, all SSL does is providing an encrypted connection between the server and the client. (and possible verification of server identity with a signed cert).
If it is a public website doing commerce stuff you likely need a cert signed by a commonly trusted issuer, such as Equifax (GeoTrust)