I want two Apache Servers (httpd & httpsd)=> 2 directories:
(1) /usr/local/apache1311  : simply apache 1.3.11
(2) /usr/local/apachessl   : apache 1311 + patch SSL (0.9.5)

-Questions:
Can I to do this? Is it possible ?
Problem with convertion of signed certification (cfr $Create Key/SSL, end of
this doc)
 Where is error?
How to do to obtain a good separation between Httpd & httpsd?
Is my install good?

-Install (step by step):
 *install openssl
  ./config --prefix=/usr/local --openssldir=/usr/local/openssl no-threads
no-asm
  make
  make test
  make install =>OK

 *(1) ./configure --enable-module=most --enable-shared=max --target=apache
--prefix="/usr/local" --exec-prefix=/usr/local
 => make & make install... => OK

 *(2) ./configure --enable-module=most --enable-shared=max --target=httpsd
--prefix="/usr/local" --exec-prefix=/usr/local --with-port=443
 => make & make install... => O

 Next step (1) & (2)
 cd /usr/local
 cp -r /System/Developer/Examples/WebObjects/Source/Adaptors .
 cd Adaptors/Apache
 make "APXS = /usr/local/sbin/apxs"
 install mod_WebObjects.so /Local/Library/Apache/Modules/

 cd /Local/Library/WebServer/Configuration
 cp apache.conf apache.conf-System_<number>
 sed -e 's/\/System\/Library\/Apache/\/Local\/Library\/Apache/g'
\apache.conf > apache.conf-Local
 cp apache.conf-Local apache.conf

 *Modify /etc/startup/2000_WebServer
  ...
  /usr/local/sbin/apachectl start
  /usr/local/sbin/httpsdctl start
  ...
-Create Key / SSL
 *create ~/.rnd file containing some "random" bytes
 *openssl req -new -config /usr/local/openssl/openssl.cnf > new.cert.key
 *openssl rsa -in privkey.pem -out new.cert.key
 *openssl x509 -in new.cert.csr -out new.cert.cert -req -signkey
new.cert.key -days 365    => KO !!!
   return error : "new.cert.csr: No such file or directory"
  => openssl req -new -x509 -key new.cert.key -days 365 -out new.cert.cacert
=> OK
  => Correct ???
 * modify httpsd.conf
  ??? I haven't this file !?!
  In theory : define
   SSLCertificateFile /usr/local/openssl/private/certs.new.cert.cacert
   SSLCertificateKeyFile /usr/local/openssl/private/certs.new.cert.key


Thanking you in anticipation

Christian Margreve
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to