Re: [cobalt-users] after open ssl install

[flash22@xxxxxxx]

On Wed, 31 Jan 2001, Clayton McGow wrote:

> Hello all,
> 
> 	I'm confused by the SSL thing. I'm running a Raq2. Suppose
> I choose to install OpenSSL by using it's easiest default
> install procedure.

It will likely blow up ;)

> 
> 	My understanding is that installation would create some
> directories and encrytption libraries, but NOT cause Apache
> to respond to SSL conection requests.

Right..

> 
> 	Here's what I THINK I would have to do:
> 	
> 1) In order to run a secure httpd I would need to tell
> httpd.conf to listen 443 after installing SSL 

No

> 2) I need to get a certificate from thawte and place it
> (whatever "it" is) in SOME folder

Yes

> 3) I need to tell Apache which documents to secure and which
> ones to not, probably by placing secure documents in a
> certain directory and then informing Apache where to look
> (somehow)

No, tho you can, using https instead of http tells the browser to use the
ssl port , so if you overlay document root, you can use both secure and
non secure just be changing the request ... however you can also do it via
a magic directory ...

> 4) I need to restart apache

You need to do a bit more than that ;0

> 
> OK, it should be obvious enough that I'm totally lost. I
> don't suppose anybody wants to guide me through the steps,
> although that would be really great... short of that, can
> any body point me to a tutorial that's targetted somewhere
> between pre-school and brain surgeon?
> 
> 	Yes, I would rather buy BroSoft... too poor.

Well, what brosoft is selling you is some of the work you are about to do
yourself, but they are also including the apache ssl module which you
don't have, you need that also...

I suppose you could find something like 'redhat secure server' and build
it yourself, i'll warn you right up front, building apache is not for the
faint hearted, more so on a raq2...

There is quote a bit of documentation on apache's website if you can find
it, also on redhat's and on openssl.org....

I really hate to ring brosofts' bell here, but whats your time worth?