{"id":353,"date":"2007-12-11T12:13:48","date_gmt":"2007-12-11T11:13:48","guid":{"rendered":"http:\/\/www.dotmana.com\/index.php\/?p=353"},"modified":"2009-09-18T20:22:17","modified_gmt":"2009-09-18T19:22:17","slug":"generer-certificats-ssl-pour-apache","status":"publish","type":"post","link":"http:\/\/www.dotmana.com\/weblog\/2007\/12\/generer-certificats-ssl-pour-apache\/","title":{"rendered":"G\u00e9n\u00e9rer certificats SSL pour Apache"},"content":{"rendered":"

Comment g\u00e9n\u00e9rer un certificat SSL auto-sign\u00e9 pour apache.<\/p>\n

openssl genrsa <\/tt>1024 <\/tt>-rand\/var\/log\/messages <\/code>> nom.domaine.ltd.key
\n<\/tt><\/p>\n

-> ne pas mettre de passphrase, sinon il faut la retaper \u00e0 chaque d\u00e9marrage d’apache.<\/p>\n

openssl req -new -x509 -days 3650 -key nom.domaine.ltd.key -out nom.domaine.ltd.crt<\/tt><\/p>\n

-> g\u00e9n\u00e8re un certificat valable 10 ans
\n-> dans les r\u00e9ponses, entrer le code pays, le d\u00e9partement, la ville et puis le nom.domaine.ltd <\/tt>pour la partie \"Common Name (eg, YOUR name)\"<\/tt><\/p>\n

configurer apache2.conf (ou autre ssl.conf en fonction) avec :<\/p>\n

SSLCertificateFile \/etc\/apache2\/ssl\/nom.domaine.ltd.crt
\nSSLCertificateKeyFile \/var\/lib\/dtc\/etc\/ssl\/nom.domaine.ltd.key<\/p><\/blockquote>\n

pour g\u00e9n\u00e9rer le fichier pem (utile pour courier par exemple) :<\/p>\n

cat nom.domaine.tld.key nom.domaine.tld.crt > nom.domaine.tld.pem<\/p>\n","protected":false},"excerpt":{"rendered":"

Comment g\u00e9n\u00e9rer un certificat SSL auto-sign\u00e9 pour apache. openssl genrsa 1024 -rand\/var\/log\/messages > nom.domaine.ltd.key -> ne pas mettre de passphrase, sinon il faut la retaper \u00e0 chaque d\u00e9marrage d’apache. openssl req -new -x509 -days 3650 -key nom.domaine.ltd.key -out nom.domaine.ltd.crt -> … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-353","post","type-post","status-publish","format-standard","hentry","category-dev"],"_links":{"self":[{"href":"http:\/\/www.dotmana.com\/weblog\/wp-json\/wp\/v2\/posts\/353","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.dotmana.com\/weblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.dotmana.com\/weblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.dotmana.com\/weblog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.dotmana.com\/weblog\/wp-json\/wp\/v2\/comments?post=353"}],"version-history":[{"count":2,"href":"http:\/\/www.dotmana.com\/weblog\/wp-json\/wp\/v2\/posts\/353\/revisions"}],"predecessor-version":[{"id":491,"href":"http:\/\/www.dotmana.com\/weblog\/wp-json\/wp\/v2\/posts\/353\/revisions\/491"}],"wp:attachment":[{"href":"http:\/\/www.dotmana.com\/weblog\/wp-json\/wp\/v2\/media?parent=353"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.dotmana.com\/weblog\/wp-json\/wp\/v2\/categories?post=353"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.dotmana.com\/weblog\/wp-json\/wp\/v2\/tags?post=353"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}