This document provides steps to install and configure mod_ssl on CentOS/Fedora/Redhat to enable HTTPS on the Apache web server. It describes generating a self-signed certificate, editing the ssl.conf and httpd.conf configuration files to specify the certificate details and enable SSL, and restarting the Apache server to apply the changes.

1. HTTPS
Hyper Text Transfer Protocol Secured
Port No. 443

2. The mod_ssl module provides strong cryptography for the Apache Web server via the
Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols.
How do I install and configure mod_ssl under CentOS / Fedora / Redhat Enterprise Linux?
mod_ssl is the SSL/TLS module for the Apache HTTP server. You can use self signed
certificate or 3rd party SSL certificate. This module provides SSL v2/v3 and TLS v1 support
for the Apache HTTP Server. It was contributed by Ralf S. Engeschall based on his mod_ssl
project and originally derived from work by Ben Laurie. This module relies on OpenSSL to
provide the cryptography engine.
HTTPS…….

3. HTTPS………..
Install mod_ssl
[root@ localhost ~]# yum install mod_ssl
First thing first, let’s create private key and certificate with self signature. RHEL6
provides utility called genkey to create certificates and send them to CA for
signing.
[root@ localhost ~]# openssl genrsa -des3 -out /etc/pki/CA/private/rcpl.key
[root@ localhost ~]# openssl rsa -in /etc/pki/CA/private/rcpl.key -out tmp.pem
Now we have to create CSR or Certificate Signing Request to self sign our
certificate. CSR can be created with following command.
[root@ localhost ~]# openssl req -new -key /etc/pki/CA/private/rcpl.key -out tmp.csr

4. HTTPS………
We had to enter few details related to our certificate authenticity &
organization. Let’s create signed certificate with generate CSR. In this case we
are signing certificate by ourselves. We are not sending CSR to CA.
[root@ localhost ~]# openssl x509 -req -days 100 -in tmp.csr –signkey
/etc/pki/CA/private/rcpl.key -out /etc/pki/CA/rcpl.crt
Apache SSL configurations should done inside following file. Add or replace
necessary configuration snippets to specify new key and certificate.
/etc/httpd/conf.d/ssl.conf

5. [root@ localhost ~]# vi /etc/httpd/conf.d/ssl.conf
Listen ServerIP:443
<VirtualHost ServerName:443>
SSLEngine On
SSLCertificateFile /etc/pki/CA/rcpl.crt
SSLCertificateKeyFile /etc/pki/CA/private/rcpl.key
SSLProtocol All -SSLv2
SSLCipherSuite HIGH:MEDIUM:!aNULL:+MD5
DocumentRoot "/var/www/html"
ServerName ServerName:443
</VirtualHost>
HTTPS…….

6. HTTPS…….
Now edit /etc/httpd/conf/httpd.conf
[root@ localhost ~]# vi /etc/httpd/conf/httpd.conf
<Directory /var/www/html>
SSLRequireSSL
SSLOptions +StrictRequire
SSLRequire %{HTTP_HOST} eq “ServerName"
</Directory>
Save the file and restart Apache Server.
[root@ localhost ~]# service httpd restart

7. HTTPS…….
Now edit /etc/httpd/conf/httpd.conf
[root@ localhost ~]# vi /etc/httpd/conf/httpd.conf
<Directory /var/www/html>
SSLRequireSSL
SSLOptions +StrictRequire
SSLRequire %{HTTP_HOST} eq “ServerName"
</Directory>
Save the file and restart Apache Server.
[root@ localhost ~]# service httpd restart