History for SSLcertificate

??changed:
-
**Making an SSL Certificate in Debian for apache/zope https access**

*Sometimes debian installations do it for you automatically, sometimes not ... probably depending on the history of your upgrades.  Here is a technique for doing it manually for the apache , mod-ssl server which allows your zope pages to be served with a **https:** type URL*

- The debian **libapache-mod-ssl-doc** says to create certificates with 
 **mod-ssl-makecert** (which was broken at time of writing; you may need to use the makecert.sh supplied in /usr/share/doc/libapache-mod-ssl/examples )


- A much better solution (in french) is http://www.linux-sottises.net/en_apache_install.php 

- here is a quick shell script that avoids the trap of creating a certificate that requires manual authentication of apache restarts (not good during un-attended reboots):  put this is **makecert.sh** and run it.


<pre>
#!/bin/sh
cd /etc/apache
openssl genrsa 1024 > ssl.key/server.key
openssl req -new -key ssl.key/server.key -out ssl.csr/server.csr
openssl req -x509 -days 10000 -key ssl.key/server.key \
                              -in  ssl.csr/server.csr \
                              -out ssl.crt/server.crt
cd -
</pre>

- oh ya, you will of course need the **openssl** debian package for this to work

**References**

- Excellent French HOWTO "Zope Apache SSL ZEO":http://www.zopera.org/Members/sgira/ZopeApacheSLLZEO