From owner-freebsd-questions@FreeBSD.ORG Tue Nov 24 05:06:01 2009 Return-Path: Delivered-To: freebsd-questions@FreeBSD.ORG Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E59FE106568B for ; Tue, 24 Nov 2009 05:06:01 +0000 (UTC) (envelope-from Olivier.Nicole@cs.ait.ac.th) Received: from mail.cs.ait.ac.th (mail.cs.ait.ac.th [192.41.170.16]) by mx1.freebsd.org (Postfix) with ESMTP id 91AA28FC14 for ; Tue, 24 Nov 2009 05:06:01 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.cs.ait.ac.th (Postfix) with ESMTP id 90A823A3836; Tue, 24 Nov 2009 12:05:59 +0700 (ICT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.ait.ac.th; h= references:subject:subject:in-reply-to:from:from:message-id:date :date:received:received:received; s=selector1; t=1259039159; x= 1260853559; bh=Thrq76k9Fa+Zq4A9XcrbQNjr+EpefUu6vv9kcHMJeRk=; b=d H8Uun/EhEcrvVzGM9NKl/As7SsU+fTPCkS49YRBdh62+RJO2yFe7aKlHUsLXgxeT Cenpxui05fuhwJavtQhC9FmXmygnbzYqkZWFIzzF+1UwQ89VIRSCPvivR3EwK9i5 TN9RQubu+ePiH36JFUC6q8038mHi5XywXuouO3QF2w= X-Virus-Scanned: amavisd-new at cs.ait.ac.th Received: from mail.cs.ait.ac.th ([127.0.0.1]) by localhost (mail.cs.ait.ac.th [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id IZYogSwwvCDz; Tue, 24 Nov 2009 12:05:59 +0700 (ICT) Received: from banyan.cs.ait.ac.th (banyan.cs.ait.ac.th [192.41.170.5]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.cs.ait.ac.th (Postfix) with ESMTPS id 9F96A3A382C; Tue, 24 Nov 2009 12:05:58 +0700 (ICT) Received: (from on@localhost) by banyan.cs.ait.ac.th (8.14.3/8.14.3/Submit) id nAO55vmu067347; Tue, 24 Nov 2009 12:05:57 +0700 (ICT) (envelope-from on) Date: Tue, 24 Nov 2009 12:05:57 +0700 (ICT) Message-Id: <200911240505.nAO55vmu067347@banyan.cs.ait.ac.th> From: Olivier Nicole To: kline@thought.org In-reply-to: <20091124045323.GA51923@thought.org> (message from Gary Kline on Mon, 23 Nov 2009 20:53:26 -0800) References: <20091124045323.GA51923@thought.org> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: need insights with openssl.... X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Nov 2009 05:06:02 -0000 > We need to generate SSL keys for the Apache server. I usually follow the FAQ of modssl (modssl.org); that's where I found the most usefull sample of openssl commands. I just cut and paste. The signing of certificate is not done by me though. > One other thing that is confusing is what openssl has to do > with apache. Pointers to any tutorials or other documentation > would be a huge help. If you want Apache to serve encrypted contents (httpS, port 443) then your Apache server needs a certificate, and you can use openssl to generate the said certificate. If you don't plan to server encrupted contents, you don't have to worry about openssl. Bests, Olivier