Coral: apache server cert self signed
|
Apache - Server Certificate Self-Signed This covers how to enable SSL on The Uniform Server 8.0-Coral. The Uniform Server does not include a test server certificate/key pair, so a default installation has SSL disabled. The reason is one of security. A certificate/key pair must be unique to each server. After creating a new server certificate/key pair, SSL is automatically enabled in Apache's configuration file. |
| ||||||||||||||||||||||||||
Creating a self-signed certificate
Generating a self-signed certificate requires only a few mouse clicks. The “Server Certificate and Key generator” form has been pre-configured for a self-signed certificate there is no need to change these values just click “Run Generate” However if you wish you can change any of the defaults.
|
UniController: Server Configuration > Apache > Generate Certificate
Note 1: A) If you have changed the server name, that will be displayed instead of localhost. Note 2: B) C) Are dropdown menus. Note 3: C) 2048 Bits provide high-grade encryption. It's recommended not to change this. |
|
Alternative Scripts
The Uniform Server provides three scripts to generate a server certificate and key pair.
- UniServer\openssl\Generate_server_cert_and_key.bat
- UniServer\openssl\Generate_server_cert_and_key.vbs
- UniServer\coral_con\scripts\Key_cert_gen.hta
Generate_server_cert_and_key.bat
This script generates a self-signed server certificate and key pair. It assumes you have not changed the server name from its default of localhost. This allows the certificate and key to be automatically generated and installed without any user input.
Note: The certificate signing request is not required and is deleted.
Generate_server_cert_and_key.vbs
This script also generates a self-signed server certificate and key pair, but it assumes you have changed the server name from its default of localhost. A popup displays the current server name setting. You can either accept this displayed value or change it as required. Pressing OK in either case will generate and install the certificate and key.
Note: The certificate signing request is not required and is deleted.
Key_cert_gen.hta
Self-signed certificate:
This script is similar to the above in that it generates a self-signed server certificate and key pair. Several certificate defaults are displayed including server-name. For a self-signed certificate you need only change the server-name or accept its default. Pressing "Run Generate" generates and installs the certificate and key.
Signed certificate:
If you are intending to purchase a signed certificate, fill in all appropriate form fields. Pressing “Run Generate” generates and installs the (self-signed) certificate and key. Unlike the previous two key-cert generation scripts, this script does not delete the certificate-signing request (server.csr). It is located in folder UniServer\openssl. You will open this file and post the contents for signing by the certificate authority. When you receive the signed certificate, you will replace the self-signed certificate with it.
Note 1: Copy both the server key, UniServer\usr\local\apache2\server_certs\ssl.key\server.key, and the returned signed certificate to a writable CD or USB memory stick for safekeeping.
Note 2: For a free signed certificate check out the following page: Free server certificate
Where to next
Apache SSL Introduction and overview.
Free server certificate How to obtain and install a free server certificate from StartCom