SitePoint.com

ArticleBot · Aug 2, 2004, 07:43

This is an article discussion thread for discussing the SitePoint article, "Securing Your Apache 2 Server with SSL"

mrjones109 · Aug 2, 2004, 07:43

SSL Review now directs to Geotrust?

**bwarrene** · Aug 2, 2004, 08:21

Unfortunately you are correct! That is a surprise even that they owned the sslreview.com site!

I did find a cached version of the comparison chart via Google to insure it remains available to readers.

http://64.233.167.104/search?q=cache...UTF-8&oe=UTF-8

I will also update the older Open Sourcery post.

My apologies - at the time this column was going to press (two weeks ago) the site was active with no notices of discontinuation.

Thanks for pointing this out.

mrjones109 · Aug 2, 2004, 10:20

The article is informative, but it would be even more helpful it included how to use SSL with a control panel such as CPanel on a shared server. I'm sure a lot of people use the Linux/CPanel/PHP/mySQL setups.

**bwarrene** · Aug 2, 2004, 12:14

Quote:

Originally Posted by mrjones109

The article is informative, but it would be even more helpful it included how to use SSL with a control panel such as CPanel on a shared server. I'm sure a lot of people use the Linux/CPanel/PHP/mySQL setups.

As seen in the intro of the piece:

"In today's Web hosting environments, many Webmasters host on servers with ready-made SSL setups and no installation requirements, or with setups on which a control panel handles the heavy configuration work. Whatever the case, it's important to understand just what your SSL options are, and to know how to manage the process manually."

====

I specifically note that with today's control panels - there is not much to explain as they handle the config work. This article intends to show how it is done manually so the process is understood.

For example, most users of cpanel would not be able to necessarily create their own CSR request to buy a cert - it would be done by their host. And for those with dedicated servers running a GUI, they often can use a point and click interface to build the CSR and install cert.

It could come in handy someday to know how it is done by hand on the command line if the situation ever arises.

Widow Maker · Aug 3, 2004, 14:19

I don't have Apache :(

Is there something simular for IIS5.1 & WinXP Pro ?

**bwarrene** · Aug 4, 2004, 07:21

SSL certs support numerous web servers on many platforms Widow Maker -- and VeriSign has instructions on how they are installed on IIS 4, 5, and 6. IIS 5 is here -- http://verisign.com/support/install/microsoft/v50.html

myrdhrin · Aug 4, 2004, 09:10

How about Apache on WinXP Pro... I'm still "fighting" to get it to work on my workstation for test purpose with no success....

**bwarrene** · Aug 5, 2004, 07:37

Quote:

Originally Posted by myrdhrin

How about Apache on WinXP Pro... I'm still "fighting" to get it to work on my workstation for test purpose with no success....

The Apache binary from apache.org should work fine on Win XP Pro - however - I have never tested an SSL on Apache on Windows XP. Any testing I have done has been on a server OS with Apache.

However -- I did browse through a decent discussion of Apache with SSL on Windows here -- although the OS was Windows 2000.

http://forums.devarticles.com/archive/t-1794

According to some DevShed posts - users have gotten Apache working under SSL on XP Pro. They did suggest generating the CSR was problematic. I may give it a shot here in my lab and see if what happens.

myrdhrin · Aug 5, 2004, 08:11

Quote:

Originally Posted by bwarrene

However -- I did browse through a decent discussion of Apache with SSL on Windows here -- although the OS was Windows 2000.

http://forums.devarticles.com/archive/t-1794

Thanks for the pointer.... as long as it is Win32 based I should be able to get to it. My biggest problems comes when they say : " you need to compile this and that" I have some knowledge of C but not enough to say I'll go download that code; tweak it and make it work...

I'll give it a try!

Thanks again!

Stryderjzw · Aug 7, 2004, 17:01

Kudos on a great article! And just when I needed it too!

Too bad SSLReview is gone... Even the Google cache doesn't seem to work.

Aug 11, 2004, 14:15

Great article! Very helpful, can't thank you enough!

Oct 3, 2004, 21:28

really great~
clever some of my concept.
Thank you very much

Oct 5, 2004, 01:34

I want this type of article ....... than you very much

Oct 11, 2004, 07:22

nice - helped me to solve some of my problems
thx :)

Nov 23, 2004, 18:30

Very informative document, thanks!! It would be great if you can tell us how to install a CA certificate, we have a few web servers, and on this one i generated my own as you said, but is says this: "This CA Root certificate is not trusted because it is not in the Trusted Root Certification Authorities store.". Someone has generated a CA certificate on another server here, how do i configure my apache2 server so my certificate is trusted?

birwin0000 · Feb 15, 2005, 12:24

The sslreview web sites not longer has the ssl trusted CA review. I have created a web site that compares CAs. The site is located at http://www.sslassistant.com. It contains a wizard that allows users to compare CAs with their SSL needs.

Jul 8, 2005, 09:10

How do I do this with Windows? I can't find MOD_SSL.SO anywhere...

Dec 12, 2005, 23:15

While running Apache I got an error message like "the system can not find the specified file:No installed service named Apache2"

I tried to install Apache2 using the command apache -k install -n apache2

But no result.

I also changed the port number to 1080 and for ssl 2443.

Dorza · Mar 16, 2006, 13:47

To Anon - Jul8th 2005

Try here:

http://tud.at/programm/apache-ssl-win32-howto.php3

I tried this and although the process works it doesnt tell you how to use the system. For example https://localhost doesnt work. Knowing how to get this to work would be handy.

Id much rather follow the sitepoint version above if it was converted to a windows version.

Apr 19, 2006, 00:21

It works. But have to #listen 80. Otherwise, the "http://localhost" still exists.

Feb 21, 2007, 04:30

Useless ! No Use At All

gadiandi · Jun 26, 2007, 20:54

For a great comparison chart of SSL certificates check out SSL Shopper (http://www.sslshopper.com)

It is similar to what SSL Review used to be but it is updated and includes reviews for the different certificate authorities.

Nov 29, 2007, 21:09

Is it possible to have more than one cert. used/honoured by the server? For example, I want mobile phones to talk to my server, some require/use a geotrust cert. and some have a verisign one.

Nov 29, 2007, 21:37

Re: last post "is it possible to have more than one cert. per site". It looks like we can concatonate each cert into a single ".crt" file. But then, what do we do if there is an intermediate file required (as is the case for the latest verisign SSL certs) mixed with a cert that does not have an intermediate? Can the server just figure it out? I dont think so cause my mobile phone client gives different error messages...

Aug 2, 2004, 07:43	#1
ArticleBot SitePoint Articles Join Date: Apr 2001 Posts: 0	Article Discussion This is an article discussion thread for discussing the SitePoint article, "Securing Your Apache 2 Server with SSL"

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Aug 2, 2004, 07:43	#2
mrjones109 SitePoint Member Join Date: Feb 2003 Location: Augusta, GA Posts: 5	SSL Review now directs to Geotrust?

Aug 2, 2004, 08:21	#3
bwarrene SitePoint Columnist Join Date: Nov 2003 Location: Ohio Posts: 747	Unfortunately you are correct! That is a surprise even that they owned the sslreview.com site! I did find a cached version of the comparison chart via Google to insure it remains available to readers. http://64.233.167.104/search?q=cache...UTF-8&oe=UTF-8 I will also update the older Open Sourcery post. My apologies - at the time this column was going to press (two weeks ago) the site was active with no notices of discontinuation. Thanks for pointing this out.

Aug 2, 2004, 10:20	#4
mrjones109 SitePoint Member Join Date: Feb 2003 Location: Augusta, GA Posts: 5	The article is informative, but it would be even more helpful it included how to use SSL with a control panel such as CPanel on a shared server. I'm sure a lot of people use the Linux/CPanel/PHP/mySQL setups.

Aug 3, 2004, 14:19	#6
Widow Maker Non-Member Join Date: Jan 2004 Location: Planet Earth Posts: 1,807	I don't have Apache :( Is there something simular for IIS5.1 & WinXP Pro ?

Aug 4, 2004, 07:21	#7
bwarrene SitePoint Columnist Join Date: Nov 2003 Location: Ohio Posts: 747	SSL certs support numerous web servers on many platforms Widow Maker -- and VeriSign has instructions on how they are installed on IIS 4, 5, and 6. IIS 5 is here -- http://verisign.com/support/install/microsoft/v50.html

Aug 4, 2004, 09:10	#8
myrdhrin Cubes into Flat Circles Join Date: Jul 2004 Location: Montreal Posts: 221	How about Apache on WinXP Pro... I'm still "fighting" to get it to work on my workstation for test purpose with no success....

Aug 7, 2004, 17:01	#11
Stryderjzw SitePoint Enthusiast Join Date: May 2002 Posts: 49	Kudos on a great article! And just when I needed it too! Too bad SSLReview is gone... Even the Google cache doesn't seem to work.

Aug 11, 2004, 14:15	#12
pacha SitePoint Community Guest Posts: n/a	Great article! Very helpful, can't thank you enough!

Oct 3, 2004, 21:28	#13
gigi SitePoint Community Guest Posts: n/a	really great~ clever some of my concept. Thank you very much

Oct 5, 2004, 01:34	#14
Rajesh Das SitePoint Community Guest Posts: n/a	I want this type of article ....... than you very much

Oct 11, 2004, 07:22	#15
Anonymous SitePoint Community Guest Posts: n/a	nice - helped me to solve some of my problems thx :)

Nov 23, 2004, 18:30	#16
Bill SitePoint Community Guest Posts: n/a	Very informative document, thanks!! It would be great if you can tell us how to install a CA certificate, we have a few web servers, and on this one i generated my own as you said, but is says this: "This CA Root certificate is not trusted because it is not in the Trusted Root Certification Authorities store.". Someone has generated a CA certificate on another server here, how do i configure my apache2 server so my certificate is trusted?

Feb 15, 2005, 12:24	#17
birwin0000 SitePoint Member Join Date: Feb 2005 Posts: 4	The sslreview web sites not longer has the ssl trusted CA review. I have created a web site that compares CAs. The site is located at http://www.sslassistant.com. It contains a wizard that allows users to compare CAs with their SSL needs.

Jul 8, 2005, 09:10	#18
Anonymous SitePoint Community Guest Posts: n/a	How do I do this with Windows? I can't find MOD_SSL.SO anywhere...

Dec 12, 2005, 23:15	#19
anto SitePoint Community Guest Posts: n/a	While running Apache I got an error message like "the system can not find the specified file:No installed service named Apache2" I tried to install Apache2 using the command apache -k install -n apache2 But no result. I also changed the port number to 1080 and for ssl 2443.

Mar 16, 2006, 13:47	#20
Dorza SitePoint Enthusiast Join Date: Apr 2005 Posts: 57	To Anon - Jul8th 2005 Try here: http://tud.at/programm/apache-ssl-win32-howto.php3 I tried this and although the process works it doesnt tell you how to use the system. For example https://localhost doesnt work. Knowing how to get this to work would be handy. Id much rather follow the sitepoint version above if it was converted to a windows version.

Apr 19, 2006, 00:21	#21
Paul SitePoint Community Guest Posts: n/a	It works. But have to #listen 80. Otherwise, the "http://localhost" still exists.

Feb 21, 2007, 04:30	#22
Amit Pariyar SitePoint Community Guest Posts: n/a	Useless ! No Use At All

Jun 26, 2007, 20:54	#23
gadiandi SitePoint Enthusiast Join Date: Jun 2007 Posts: 56	For a great comparison chart of SSL certificates check out SSL Shopper (http://www.sslshopper.com) It is similar to what SSL Review used to be but it is updated and includes reviews for the different certificate authorities.

Nov 29, 2007, 21:09	#24
Mike SitePoint Community Guest Posts: n/a	Is it possible to have more than one cert. used/honoured by the server? For example, I want mobile phones to talk to my server, some require/use a geotrust cert. and some have a verisign one.

Nov 29, 2007, 21:37	#25
Mike SitePoint Community Guest Posts: n/a	Re: last post "is it possible to have more than one cert. per site". It looks like we can concatonate each cert into a single ".crt" file. But then, what do we do if there is an intermediate file required (as is the case for the latest verisign SSL certs) mixed with a cert that does not have an intermediate? Can the server just figure it out? I dont think so cause my mobile phone client gives different error messages...