SSL on Apache 2.2 with Windows
Monday, July 14th, 2008I’m collecting information on generating a SSL cert using an internal CA cert using OpenSSL with Apache 2.2 on Windows. I found most of the OpenSSL info on this page. This will be work in progress until I am done.
You’ll need:
- Apache 2.2 install with OpenSSL. I used the Windows installer, which includes the openssl binary. It looks like installing the Cygwin OpenSSL package will also install this binary, but I don’t know if it is compatible with the version of OpenSSL that ships with Apache.
- CA cert for your organization (.cer).
- Private key file for CA cert (.key).
- Open a command prompt and set the OPENSSL_CONF variable to point to the local Apache OpenSSL config file:
set OPENSSL_CONF=c:\Program Files\Apache Software Foundation\Apache 2.2\conf\openssl.cnf. Note: do NOT use double quotes. - Generate the private key for your server:
openssl genrsa -des3 -out server.key 4096 - Create and sign certificate request:
openssl req -new -key server.key -out server.csr