-

Open SSL On Apache

Before installation my web pages look like this:



Step:Now I am going to install ssl :

#yum install mod_ssl

Step:Then install open ssl:

#yum install openssl
Step:Generate a private key with 2048 bit encription:

#openssl genrsa -out ca.key 2048

Step:Then generate the certificate signing request (CSR) by using the following command.

# openssl req -new -key ca.key -out ca.csr

Step:Generate a self-signed certificate of X509 type which remains active for 365 days.

#openssl x509 -req -days 365 -in ca.csr -signkey ca.key -out ca.crt

Step:After generating the certificates, copy the files to the necessary directory.

# cp ca.crt /etc/pki/tls/certs
#cp ca.ke
#cp ca.csr /etc/pki/tls/private
Step:
Now edit the secure web server configuration file and add the below lines into bottom of file.

 #vim /etc/httpd/conf.d/ssl.conf
 
 




 
Step:
check http configration.


# httpd -t
 







Step:
open http conf and add these at end of the file as in screen shot:
 
 
Step:
Add the service and the port number to the firewall

Step:restart the appache
Step:check on url:






















































Comments











Post a Comment






























Popular posts from this blog













-














Image







   ELK Step by Step Guide                     Following is detail of elk ,how we install,start  and run. and prepare report   I install elk on Docker with following step:     Step1   Check the status of docker:                      Step2        I have created "docker" folder on my machine.   Step3     I have created three folder in docker folder:     config    data  docker-compose.yml   Step4   Then configure these folder with following is the step and data:  we can change these configration with our requirement,    First Configure docker-compose.yml    version: "2.0" services:  elk:   image: sebp/elk:latest   ports:     - "5601:5601"     - "9200:9200"     - "5044:5044"     - "9300:9300"   volumes:         - "/home/keenable/docker/data:/tmp/in_data"         - "/home/keenable/...








Read more














-














Image







                           Postfix installation Step by step               I have already posted on Zimbra mail service, now i am going to share   how to install and configure postfix mail server using devocot and  squrell mail service, suggest you go into detail study of post fix and  other mail server before going to install and use, and different mail  protocol i will publish all these on my later edition.Here i  am  going  to tell you some future of post fix mail server,and why we choose  postfix.   What is post fix?  Postfix is an open-source Mail Transport Agent ( MTA ), which supports protocols like LDAP, SMTP AUTH (SASL), and TLS.     Operating systems:   Postfix runs on every Unix and Linux Operating syst em,It is the default MTA of Linux and  Ubuntu  operating systems.To install Post fix first we need to uninstall default post fix.          Architecture:           Postfix consists of a combination of server programs that run in the background, and client pr...








Read more










Docker Private Registery






-














Image







 Docker private registry Why we need pvt registry "Security, minimize internet load, speed, control We need to setup registry in three stage , stage one  simple stage two  secure (with ssl)  stage three with authentication Stage one: Step: create directories, need to create below directories a. Create a directory to store docker image b. create a certificate directory c. Auth directory Step :Run a docker registry container Create a container without volume with below command sudo  docker run -d -p 5000:5000 --name local-registry registry:2 below is screen shot check in browser:  tag the image, command to tag image sudo docker tag centos:7 127.0.0.1:5000/centos:7 Step Push image and check the browser again In ss centos is available, also in container it show as below  Stage two Step:  create a directory with the name of "docker-registry" then create two direcotries inside it  certs  data Step: then generate certificate inside certs direct...








Read more