Comments on: Installing SSL Certificate on Apache2.2 installed on Windows 2003 Server

By: evo

evo — Tue, 02 Aug 2011 01:25:29 +0000

Actually unless your using an ecommerce site, having a self-signed cert provides no more encryption (128bit is 128bit). People visiting will get the warning that the cert is self signed though.
Unfortunately I don’t have any guides on removing the self-signed cert. I would venture a guess that you would have to remove it though before you attach a new one.

By: David

David — Tue, 02 Aug 2011 01:03:08 +0000

Thanks for your post. Have been searching everywhere for help, and this looks easy to follow.
I’d somehow managed to install a self-generated certificate using a guide from another site, which works well, but I’m under the impression it has it’s limitations.
Would this self-generated certificate need to be removed before using your guide, and if so, any tips?

By: evo

evo — Wed, 03 Feb 2010 04:22:37 +0000

Glad it helped! Need to update the posting though cause the formatting came in a little weird from Blogger, but nonetheless the information is there =)!

By: burt

burt — Sun, 03 Jan 2010 03:22:21 +0000

Dear Sir:

Thanks for your documantion for Apache 2.2 SSL Certificate installation,
http://wp.evolutioncreations.com/2008/05/installing-ssl-certificate-on-apache22/

it give me a big big help!

wish you have nice day and Happy new year!!

burt
from Taiwan

By: ar

ar — Mon, 28 Sep 2009 12:24:35 +0000

hi friend,

If you can buy the new certificate from http://www.tucktail.com/ or you can renew it. Then install the Apache,

By: evo

evo — Sat, 22 Aug 2009 14:23:49 +0000

@Andy, is this a Windows install of Apache/SSL? The path that you provide is for linux:

/usr/local/ssl/openssl.cnf

as Windows shouldn't recognize a /usr mount. Can you tell me where in the guide you are stopped at?

By: Andy

Andy — Sat, 22 Aug 2009 14:09:15 +0000

Please can ou help when I run the decrypt command line I keep getting a error saying "Warning: can't open config file: /usr/local/ssl/openssl.cnf" ,, tried various switches to point the command at the location of it,, but they all get rejected.. can you help

Andy Hughes

Ahughes * 2t2t.co.uk

By: evo

evo — Sat, 28 Feb 2009 18:13:00 +0000

Ah I see, I haven’t tried to integrate RSA encryption keys into Apache before. It looks like you are trying to install this from the steps on this board:

http://www.wampserver.com/phorum/read.php?2,32986,page=1

I’d have to try to install using these instructions in a VM environment to see if I could replicate the issue and figure this out. Might be also worth reaching out to that community as it seems like your error has been experienced there also by others.

By: rams

rams — Sat, 28 Feb 2009 16:14:00 +0000

hi

i used these steps

# Create a RSA private key for your server (will be Triple-DES encrypted and PEM formatted):

$ openssl genrsa -des3 -out server.key 1024

Please backup this host.key file and the pass-phrase you entered in a secure location. You can see the details of this RSA private key by using the command:
$ openssl rsa -noout -text -in server.key

If necessary, you can also create a decrypted PEM version (not recommended) of this RSA private key with:

$ openssl rsa -in server.key -out server.key.unsecure

# Create a self-signed Certificate (X509 structure) with the RSA key you just created (output will be PEM formatted):

$ openssl req -new -x509 -nodes -sha1 -days 365 -key server.key -out server.crt

This signs the server CSR and results in a server.crt file.
You can see the details of this Certificate using:

$ openssl x509 -noout -text -in server.crt

Error shown on this step

# Create a self-signed Certificate (X509 structure) with the RSA key you just created (output will be PEM formatted):

these steps are creating for ssl certificate .

thanks in advance

By: evo

evo — Sat, 28 Feb 2009 14:58:00 +0000

What part of the guide did you experience this issue on?