Skip to main content

SSL Certificate For The Server


SSL Certificate Installation

SSL Certificate Installation (SSL)

     SSL CERTIFICATE FOR THE SERVER

Create your server's original SSL Certificate. If you use your server as a business, it had better buy and use a Formal Certificate from Verisign and so on.

This involves 2 steps : SSL Certificate Creation and Httpd configuration.

Step 1 : SSL Cert Creation : 


  • Here are some steps shown by means of pictures you can run those commands to install self signed certificate on your server -
  • Run,           # cd /etc/pki/tls/certs  
  • Then use,  #  make server2.key

Then enter any password that it will prompt for.





  • Next use this command,  # openssl rsa -in server2.key -out server2.key
   
           Then again it will ask for some password again reenter it.


  • Then use, # make server2.csr
           
           This will then generate the Certificate Signing Reqest.

           Then it will ask you some information like Country Name, State, City etc.

           Email Address of the responsible person, Server Name (FQDN) etc.

          Then atlast it will again ask you for the password then give the same.
        
           


  • Then use these commands,
          
 #  openssl x509 -in server2.csr -out server2.crt -req -signkey server2.key -days 3650
 #  chmod 400 server.*     




Step 2 : Httpd Configuration :

  • First Install mod_ssl,
  
         # yum install mod_ssl -y

  • Then Edit, # vi  /etc/httpd/conf.d/ssl.conf
                
          # uncomment line # 84 “Document Root - /var/www/html”

         # uncomment line, specify server name # 85 “Server Name and port no.”

        # line 112 : specify certificate
“SSL Certificate File - /etc/pki/tls/certs/server2.crt”

       # line 119 : specify cert key
“SSL Cert Key File - /etc/pki/tls/certs/server2.key”

  • Then Restart, # /etc/rc.d/init.d/httpd restart



Access to the test page with https. Following window is shown because Certification File is made by yourdelf, it's no ploblem, Click Ok to proceed. 


   


Just Installed SSL Certificate For The Domain

Installed SSL Certificate




Install your server certificate on your pc and then safely access to your server.




FEED






Share









SUPPORT
















VISIT COUNTER !!




ROHIT PATEL
 


Labels:

Comments

Post a Comment

Popular posts from this blog

Defacing Sites via HTML Injections (XSS)

Defacing Sites via HTML Injections Defacing Sites via HTML Injections What Is HTML Injection: "HTML Injection" is called as the Virtual Defacement Technique and also known as the "XSS" Cross Site Scripting. It is a very common vulnerability found when searched for most of the domains. This kind of a Vulnerability allows an "Attacker" to Inject some code into the applications affected in order to bypass access to the "Website" or to Infect any particular Page in that "Website". HTML injections = Cross Site Scripting, It is a Security Vulnerability in most of the sites, that allows an Attacker to Inject HTML Code into the Web Pages that are viewed by other users. XSS Attacks are essentially code injection attacks into the various interpreters in the browser. These attacks can be carried out using HTML, JavaScript, VBScript, ActiveX, Flash and other clinet side Languages. Well crafted Malicious Code can even hep the ...
Post a Comment
Read more

EKS Cluster and Create CSI Driver to store credentials in AWS Secrets Manager via SecretProviderClass

EKS Cluster | CSI Driver | SecretProviderClass | AWS Secrets Manager Setup EKS Cluster and Manage Credentials at runtime using CSI driver using SecretProviderClass and Secrets Manager Assuming you have Configured/Installed AWS CLI, EKSCTL, KUBECTL, HELM. CSI Basic Information: CSI (Container Storage Interface) widely used as a Storage Technology. Created by Google | Mesosphere | Docker.  It has two two Plugins one runs on the Master Node (Centralized Controller Plugin) and another one on Worker Nodes (Decentralized headless Node Plugin).  CSI communication protocol is gRPC.   The communication between Container Orchestration to Controller Plugin (Master) and to Node Plugin (Worker Node) happens using gRPC .  CSI Drivers : vendor specific compiled into Kubernetes/openshift binaries. To use a CSI driver, a StorageClass needs to be assigned first.  The CSI driver is then set as the Provisioner for the Storage Class. CSI drivers provide three main service...
Post a Comment
Read more

Linux Systems Performance/Observability (BPF (bpfcc-tools), BCC Tools

  Linux System Performance/Observability Tools Linux Systems Performance/Observability (BPF (bpfcc-tools), BCC Tools Assuming you have Linux Server in place and have the required BPF aka BCC related packages installed on the system(s) for the required Linux distribution. BPF(eBPF) aka BCC Tools (bpfcc-tools) : BPF, which originally stood for Berkley Packet Filter is the dynamic tracing tools for Linux Systems.  BPF initially used for the speeding up for the tcpdump expressions and since then it has been know as the extended Berkley packet Filter (eBPF).  Its new uses are Tracing Tools where it provides programmability for the BPF Compiler Collection (BCC) and bpftrace front ends .   Example: execsnoop, biosnoop etc is a BCC Tool. When facing production performance crisis these such list of tools comes handy to trace and fix the issue. However, it requires certain KERNEL level config options to be enabled such as CONFIG_FTRACE, CONFIG_BPF. Profiling tools typically re...
Post a Comment
Read more