SSLEngine on SSLCertificateFile /etc/httpd/ssl.crt/server.crt SSLCertificateKeyFile /etc/httpd/ssl.key/server.key OpenSSL: openssl genrsa -des3 -out ca.key 4096 openssl req -new -x509 -days 365 -key ca.key -out ca.crt openssl genrsa -des3 -out server.key 4096 openssl req -new -key server.key -out server.csr openssl x509 -req -days 365 -in server.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server.crt ## opt # openssl rsa -noout -text -in server.key # openssl req -noout -text -in server.csr # openssl rsa -noout -text -in ca.key # openssl x509 -noout -text -in ca.crt openssl rsa -in server.key -out server.key.insecure mv server.key server.key.secure mv server.key.insecure server.key cp server.key /etc/apache2/ssl cp server.crt /etc/apache2/ssl http://www.tc.umn.edu/~brams006/selfsign.html http://www.nurdletech.com/https.html http://slacksite.com/apache/certificate.html http://www.modssl.org/docs/2.8/ssl_howto.html http://www-128.ibm.com/developerworks/library/wa-multissl.html