Page 1 of 1
SSL
Posted: Mon Sep 01, 2003 5:40 pm
by php_wiz_kid
Ok everybody. I got OpenSSL to run localy on my computer just to test it out. So now I can create my own certificates to test with, which is nice because I'm broke. Now, I was able to create a test certificate, and as I was looking through other sites' certificates, which I have on my computer, I saw that they had a lot more options, like they used V3 and my certificate is V1. When I issue a certificate the issuer and the isuee are the same. It also says that my certificate name is invalid or the certificate is not the same as the site name. How do I fix this? I know this might be out of place, but you guys have always been able to help. Thanks.
Posted: Mon Sep 01, 2003 9:00 pm
by volka
did you use CA.pl and its openssl.cnf as provided by openSSL?
Posted: Tue Sep 02, 2003 4:07 am
by twigletmac
Moved to the Miscellaneous forum - please try and post in the forum which is most relevant for the question.
Mac
Posted: Tue Sep 02, 2003 7:41 am
by php_wiz_kid
No, I didn't use the CA.pl. I don't know how to use it. I just got it working after many long hours of trying to get it to work on a windows machine. So I'm not exactly sure what I'm doing. I created a couple BAT files to create my test certificate so I wouldn't have to do it through the command line. So, if you could tell me how to use the CA.pl that would be great.
Posted: Tue Sep 02, 2003 11:36 am
by volka
Posted: Tue Sep 02, 2003 6:41 pm
by php_wiz_kid
Thanks for the help. I just bought a book about OpenSSL from Amazon and I should expect it in the next few days. This will probably answer all my questions. Thanks for your help volka, I really appriciate it.
Making certificate SSL
Posted: Sat Sep 06, 2003 9:55 pm
by d-m
Its easy, when you compile the apache with mod_ssl you can generate your certificate .. its the best way. Do like thise:
when you do make certificate TYPE=custom you are gonna make your certificate
--- APACHE ---
cd ../mod_ssl-2.8.10-1.3.28
./configure --enable-module=so --with-apache=../apache_1.3.28 --with-ssl=../openssl-0.9.7
cd ../apache_1.3.28/
make
make certificate TYPE=custom
make install
--- END APACHE ---
PS: CRIPT the CA.key
DO NOT CRYPT server.key
-- PHP --
cd ../php-4.3.3
./configure --with-apxs=/usr/local/apache/bin/apxs --with-pgsql --with-mysql --with-zip=/usr/local/lib
make
make install
-- END PHP ---
make sure you got the apache, mod_ssl and php decompressed at /usr/scr and enters at apache to start the process
