Take the first part <DELETED> including the BEGIN/END Lines, store them
in a file called servername.crt and put in in the Directory
/usr/local/apache/conf/ssl.crt or wherever you installed Apache. Put the
remaining two certificates (CA-Certificate and Root-Certificate) in a
file called servername-chain.crt and put this in the same directory.

Then, in httpd.conf you point the directive SSLCertificateFile to your
server certificate:
SSLCertificateFile /usr/local/apache/conf/ssl.crt/servername.crt

Then, you point the directive SSLCertificateChainFile to your chain
file:

SSLCertificateChainFile 

What is still absolutely neccessary is to store the file containing your
Private Key (You got that when you generated your request) into the
directory /usr/local/apache/conf/ssl.key and point the directive
SSLCertificateKeyFile to that file:

SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/servername.key

Then, you have configured your SSL Server to use this certificate and
should restart it.

Bye
Tim

Dirk Lutzebaeck wrote:
> 
> Hi,
> 
> Deutsche Telekom is offering real and test SSL certificates at
> http://www.telesec.de
> 
> What you get back looks like this:
> 
> User-Certificate:
> -----BEGIN CERTIFICATE-----
> <DELETED>
> -----END CERTIFICATE-----
> 
> CA-Certificate:
> -----BEGIN CERTIFICATE-----
> <DELETED>
> -----END CERTIFICATE-----
> 
> Root-Certificate:
> -----BEGIN CERTIFICATE-----
> <DELETED>
> -----END CERTIFICATE-----
> 
> How do I configure Apache/modssl to use these? (1.3.9/2.4.5)
> 
> Dirk
> 
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
> User Support Mailing List                      [EMAIL PROTECTED]
> Automated List Manager                            [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to