Zen

Translation

English type: Plain text
Permissions
11/110 · 11

Sign in to save the translation.

English French Actions
Using mod_ssl
 
Installing mod_ssl
 
The https://packages.fedoraproject.org/pkgs/httpd/mod_ssl/[mod_ssl] package will be automatically enabled post installation. Install the https://packages.fedoraproject.org/pkgs/httpd/mod_ssl/[mod_ssl] package using the following command:
 
sudo dnf install mod_ssl -y
 
Generating a new certificate
 
To generate a new certificate, refer to https://fedoraproject.org/wiki/Https#openssl[Create a certificate using OpenSSL].
 
Installing an existing certificate
 
If you already have a certificate generated on another computer, do the following:
 
Move the certificate and the key file to the correct folder
 
sudo mv key_file.key /etc/pki/tls/private/myhost.com.key
sudo mv certificate.crt /etc/pki/tls/certs/myhost.com.crt
 
Ensure that the following parameters are correct:
 
SELinux contexts
 
restorecon /etc/pki/tls/private/myhost.com.key
restorecon /etc/pki/tls/certs/myhost.com.crt
 
Ownership
 
sudo chown root:root /etc/pki/tls/private/myhost.com.key
sudo chown root:root /etc/pki/tls/certs/myhost.com.crt
 
Permissions
Permissions
sudo chmod 0600 /etc/pki/tls/private/myhost.com.key
sudo chmod 0600 /etc/pki/tls/certs/myhost.com.crt
 
After installing the existing certificate, set up the certificate using <<mod_ssl configuration>>.
 
mod_ssl configuration
 
The default TLS/SSL configuration is contained in the file `/etc/httpd/conf.d/ssl.conf`. In the `ssl.conf` file, following are the directives that specify where the TLS/SSL certificate and key are located:
 
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
 
These directives are enclosed in a block defining a https://httpd.apache.org/docs/current/vhosts/[virtual host]:
 
<VirtualHost _default_:443>
...
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
...
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
...
</VirtualHost>
 
To define a different location for these files, do the following:
 
Create a copy of the `/etc/httpd/conf.d/ssl.conf` file and renew the file to `z-ssl-local.conf`.
 
Edit the following lines in the `z-ssl-local.conf` file:
 
<VirtualHost _default_:443>
SSLCertificateFile /etc/pki/tls/certs/www.myhost.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/www.myhost.org.key
</VirtualHost>
 
This file will override the two settings for the `pass:[_default_]:443` virtual host; all other settings from `ssl.conf` will be retained.
 
Settings for individual virtual hosts
 
To use SSL/TLS for a specific virtual host with a different certificate as default, do the following:
 
Open that virtual host's configuration file `/etc/httpd/conf.d/hostname.conf`.
 

Loading…

User avatar None

Suggestion removed during cleanup
Permissions
Permissions
3 months ago
User avatar leopache

Suggestion accepted
Permissions
Permissions
3 months ago
User avatar leopache

Contributor joined
Contributor joined 3 months ago
User avatar anonymous

Suggestion added
Permissions
Permissions
a year ago
User avatar None

String updated in the repository
Permissions
 
a year ago
Browse all string changes

Things to check

Unchanged translation

Source and translation are identical

Reset

Glossary

English French
No related strings found in the glossary.

14985762 String information

Source string description
type: Plain text
Source string location
pages/getting-started-with-apache-http-server.adoc:108
String age
a year ago
Last updated
3 months ago
Source string age
a year ago
Translation file
po/fr/master/pages/getting-started-with-apache-http-server.po, string 33