Zen

Source string Source string

164/10000 · 164

The string is read-only.

English Actions
If you already have a certificate generated on another computer, do the following:
Move the certificate and the key file to the correct folder
sudo mv key_file.key /etc/pki/tls/private/myhost.com.key
sudo mv certificate.crt /etc/pki/tls/certs/myhost.com.crt
Ensure that the following parameters are correct:
SELinux contexts
restorecon /etc/pki/tls/private/myhost.com.key
restorecon /etc/pki/tls/certs/myhost.com.crt
Ownership
sudo chown root.root /etc/pki/tls/private/myhost.com.key
sudo chown root.root /etc/pki/tls/certs/myhost.com.crt
Permissions
sudo chmod 0600 /etc/pki/tls/private/myhost.com.key
sudo chmod 0600 /etc/pki/tls/certs/myhost.com.crt
After installing the existing certificate, set up the certificate using <<mod_ssl configuration>>.
mod_ssl configuration
The default TLS/SSL configuration is contained in the file `/etc/httpd/conf.d/ssl.conf`. In the `ssl.conf` file, following are the directives that specify where the TLS/SSL certificate and key are located:
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
These directives are enclosed in a block defining a https://httpd.apache.org/docs/current/vhosts/[virtual host]:
<VirtualHost _default_:443>
...
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
...
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
...
</VirtualHost>
To define a different location for these files, do the following:
Create a copy of the `/etc/httpd/conf.d/ssl.conf` file and renew the file to `z-ssl-local.conf`.
Edit the following lines in the `z-ssl-local.conf` file:
<VirtualHost _default_:443>
SSLCertificateFile /etc/pki/tls/certs/www.myhost.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/www.myhost.org.key
</VirtualHost>
This file will override the two settings for the `pass:[_default_]:443` virtual host; all other settings from `ssl.conf` will be retained.
Settings for individual virtual hosts
To use SSL/TLS for a specific virtual host with a different certificate as default, do the following:
Open that virtual host's configuration file `/etc/httpd/conf.d/hostname.conf`.
Insert these lines between `<VirtualHost hostname:port>` and `</VirtualHost>`:
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/hostname.crt
SSLCertificateKeyFile /etc/pki/tls/private/hostname.key

Loading…

User avatar None

String updated in the repository
<VirtualHost _default_:443>
...
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
...
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
...
</VirtualHost>
<VirtualHost _default_:443>
...
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
...
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
...
</VirtualHost>
a year ago
Browse all string changes

Things to check

Ellipsis

The string uses three dots (...) instead of an ellipsis character (…)

Reset

Glossary

English English
No related strings found in the glossary.

15133122 String information

Source string description
type: delimited block -
Flags
no-wrap, read-only
Source string location
./partialsdelete/2delete-proc_securing-apache-httpd.adoc:90
String age
a year ago
Last updated
a year ago
Source string age
a year ago
Translation file
pot/master/partialsdelete/2delete-proc_securing-apache-httpd.pot, string 28