How to set up SSL server??

[Brian Huether]

I am very confused. I am running apache 1.33 and PHP 4.3.1.0. I have no idea
what to do with either to enable SSL. I have read that PHP needs to be
compiled with some openssl option. And I understand I have to make some
apache configurations. Can someone point me in the right direction? I don't
even know where to start...

thanks,

brian

[Gordon Burditt]

>I am very confused. I am running apache 1.33 and PHP 4.3.1.0. I have no idea

what to do with either to enable SSL. I have read that PHP needs to be
compiled with some openssl option. And I understand I have to make some
apache configurations. Can someone point me in the right direction? I don't
even know where to start...

SSL is an add-on to Apache, and chances are you have to compile Apache
with the add-on, or get the appropriate port/package/rpm with it
already in there.

On FreeBSD, you'd want either the "apache13-modssl" or "apache13-ssl"
ports instead of "apache13" (there are two DIFFERENT SSL implementations).
On Linux, there's probably different rpms for Apache + SSL.
You will also likely need OpenSSL installed if it isn't already.

Then there's config file stuff for SSL: SSL is treated like a separate
virtual site, and you need to install your cert, and there's all sorts
of stuff to configure.

As far as I know, you don't have to do anything to PHP to serve web
pages with SSL (Apache does that) but if you need to connect out
to other sites to fetch other (possibly SSL) pages (why do so many
people think they need to do this?) you need to do something to
allow that (options to CURL?) whether or not your Apache does SSL.

Gordon L. Burditt

[reb]

http://cert.startcom.org/

Gordon Burditt a écrit :

I am very confused. I am running apache 1.33 and PHP 4.3.1.0. I have no idea
what to do with either to enable SSL. I have read that PHP needs to be
compiled with some openssl option. And I understand I have to make some
apache configurations. Can someone point me in the right direction? I don't
even know where to start...

SSL is an add-on to Apache, and chances are you have to compile Apache
with the add-on, or get the appropriate port/package/rpm with it
already in there.

On FreeBSD, you'd want either the "apache13-modssl" or "apache13-ssl"
ports instead of "apache13" (there are two DIFFERENT SSL implementations).
On Linux, there's probably different rpms for Apache + SSL.
You will also likely need OpenSSL installed if it isn't already.

Then there's config file stuff for SSL: SSL is treated like a separate
virtual site, and you need to install your cert, and there's all sorts
of stuff to configure.

As far as I know, you don't have to do anything to PHP to serve web
pages with SSL (Apache does that) but if you need to connect out
to other sites to fetch other (possibly SSL) pages (why do so many
people think they need to do this?) you need to do something to
allow that (options to CURL?) whether or not your Apache does SSL.

Gordon L. Burditt