Linux下安装OpenSSL.docxVIP

/guilin_gavin/article/details/4699278Linux下安装OpenSSL1，安装openssltar zxvf openssl-1.0.0a.tar.gzcd openssl-1.0.0a./config --prefix=/usr/local/opensslmake make install2,安装apache如果你已经安装了apache，你又不想重新编译的话，请参考/apachenginx/955.htmlmod_ssl模块的安装，也就是添加ssl模块而已。tar zxvf httpd-2.2.16.tar.gzcd httpd-2.2.16./configure --prefix=/usr/local/apache --enable-ssl --enable-rewrite --enable-so --with-ssl=/usr/local/opensslmake make install如果你是yum install ,apt-get,pacman这样的软件管理工具进行安装的话，上面的二步可以省掉。3，创建主证书在/usr/local/apache/conf/下面建个目录ssl3.1，mkdir ssl3.2，cp /openssl的安装目录/ssl/misc/CA.sh /usr/local/apache/conf/ssl/3.3 用CA.sh来创建证书/apachenginx/958.html查看/apachenginx/958.html复制/apachenginx/958.html打印/apachenginx/958.html?[root@BlackGhost ssl]# ./CA.sh -newca //建立主证书 CA certificate filename (or enter to create) Making CA certificate ... Generating a 1024 bit RSA private key ............++++++ ......++++++ writing new private key to ./demoCA/private/./cakey.pem Enter PEM pass phrase: Verifying - Enter PEM pass phrase: Verify failure Enter PEM pass phrase: Verifying - Enter PEM pass phrase: ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter ., the field will be left blank. ----- Country Name (2 letter code) [AU]:cn State or Province Name (full name) [Some-State]:cn Locality Name (eg, city) []:cn Organization Name (eg, company) [Internet Widgits Pty Ltd]:cn Organizational Unit Name (eg, section) []:cn Common Name (eg, YOUR name) []:localhost Email Address []:xtaying@ Please enter the following extra attributes to be sent with your certificate request A challenge password []:****************** An optional company name []: Using configuration from /etc/ssl/f Enter pass phrase for ./demoCA/private/./cakey.pem: //填的是上面的PEM密码 Check that the request matches