User:Alvonruff/HTTPS Notes

Apache

• dnf install mod_ssl
• systemctl restart httpd
• httpd -M
• cd /etc/httpd/conf.d
• Create file isfdb2.org.conf
• Add the following contents:

<VirtualHost *:80>
    ServerName stage.isfdb2.org
    DocumentRoot /var/www/html
    ServerAlias isfdb2.org
    ErrorLog /var/www/error.log
    CustomLog /var/www/requests.log combined
</VirtualHost>

• service httpd restart

Certificate Support Software

• dnf install epel-release
• dnf install snapd
• dnf install certbot
• dnf install python3-certbot-apache

Certificates

• certbot --apache
  • Select isfdb2.org
• systemctl restart httpd

• /etc/httpd/conf.d/isfdb2.org-le-ssl.conf

• openssl genrsa -out isfdb2.org.key 2048
• openssl req -new -sha256 -key isfdb2.org.key -out isfdb2.org.csr
• openssl req -text -in isfdb2.org.csr -noout
• ...MAGIC STEPS...
• cd /usr/local/share/ca-certificates/
• update-ca-trust