# install packages apt-get install openssl # apache2 apache2.2-common php5 # enable ssl in apache a2enmod ssl a2ensite default-ssl # creating an RSA key (use -des3 to create a password protected key file) openssl genrsa -out key.pem 1024 # creating a certificate request openssl req -new -nodes -x509 -out /etc/ssl/certs/ssl-cert-snakeoil.pem -keyout /etc/ssl/private/ssl-cert-snakeoil.key -days 365 -subj "/C=DE/ST=NRW/L=Cologne/O=Your Company/OU=IT/CN=www.YOUR_SERVER.com/emailAddress=you@YOUR_SERVER.com" # restart apache service apache2 restart # v2 openssl x509 -req -days 365 -in dns.server.com.csr -signkey dns.server.com.key -out dns.server.com.crt openssl req -new -nodes -x509 -out /etc/ssl/certs/ssl-cert-snakeoil.pem -keyout /etc/ssl/private/ssl-cert-snakeoil.key -days 365 -subj "/C=US/ST=CA/L=City/CN=localhost/emailAddress=root@localhost" cp /etc/ssl/private/dns.server.com.crt /etc/ssl/certs/ # view certificate info openssl req -noout -text -in dns.server.com.csr cat /etc/apache2/sites-enabled/default-ssl | grep SSLCertificateFile cat /etc/apache2/sites-enabled/default-ssl | grep SSLCertificateKeyFile mv /etc/ssl/certs/ssl-cert-snakeoil.pem /etc/ssl/certs/ssl-cert-snakeoil.pem.org mv /etc/ssl/private/ssl-cert-snakeoil.key /etc/ssl/private/ssl-cert-snakeoil.key.org cp /etc/ssl/certs/dns.server.com.crt /etc/ssl/certs/ssl-cert-snakeoil.pem cp /etc/ssl/private/dns.server.com.key /etc/ssl/private/ssl-cert-snakeoil.key /etc/init.d/apache2 restart # v3 # # generate certificate with snakeoil sudo make-ssl-cert generate-default-snakeoil --force-overwrite /etc/init.d/apache2 restart http://www.heise.de/security/artikel/SSL-fuer-lau-880221.html http://www.docs.hp.com/en/5991-1159/ch01s07.html http://wiki.ubuntuusers.de/ssl-cert http://www.schirmacher.de/display/INFO/Apache+SSL+Zertifikat+erstellen+und+installieren http://www.panticz.de/Ubuntu http://www.curtis-lamasters.com/2008/07/30/apache2-on-ubuntu-openssl-csr-self-signed-cert/