HTTP TLS Security

Question 1

Configure TLS Security

Answer 1

yum install mod_ssl openssl -y

cd /etc/pki/tls/certs/

openssl genpkey -algorithm rsa -pkeyopt rsa_keygen_bits:2048 -out lx00010304d.westrock.com.key

openssl req -new -key lx00010305p.westrock.com.key -out lx00010305p.westrock.com.csr

openssl x509 -req -days 365 -signkey lx00010305p.westrock.com.key -in lx00010305p.westrock.com.csr -out lx00010305p.westrock.com.crt

openssl s_client -connect localhost:443 -state

or

yum install mod_ssl crypto-utils -y

genkey –days 365 vhost1.example.com

Certs will be located in /etc/pki/tls/certs cert.crt and /etc/pki/tls/private cert.key

vim /etc/httpd/conf.d/ssl.conf

DocumentRoot /var/www/html/myvhost
ServerName myvhost.example.com:443
SSLCertificateFile /etc/pki/tls/certs/we3kb3.mylabserver.com.crt
SSLCertificateKeyFile /etc/pki/tls/certs/we3kb3.mylabserver.com.key