LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   how to create signed (not self signed) certificate for Apache ? (https://www.linuxquestions.org/questions/linux-server-73/how-to-create-signed-not-self-signed-certificate-for-apache-918877/)

dlugasx 12-15-2011 08:21 AM

how to create signed (not self signed) certificate for Apache ?
 
Hi Gurus,

I would like to ask You about HTTPS. How can I prepare signed certificate for Apache ?

I mean certficate based on previously generated CSR (Certificate Signing Request). Is it possible to sign certificate by the server owner ? If yes, how can I do this ?


greetz

Dlugasx

TenTenths 12-15-2011 09:57 AM

It depends on your requirements, if you're not worried about people getting errors when accessing your site you can self-sign, if you want a fully signed certificate then you will have to purchase and install one from the many certification suppliers.

dlugasx 12-16-2011 03:44 AM

Quote:

Originally Posted by TenTenths (Post 4550690)
It depends on your requirements, if you're not worried about people getting errors when accessing your site you can self-sign, if you want a fully signed certificate then you will have to purchase and install one from the many certification suppliers.

What do You mean "getting errors" ?

I would like to have simply HTTPS connection. RIght now, every time when delete a cache in my webbrowser I must accept new certificate. If certificate is signed, then I dont have to do it.

How to signe this certificate ? Command line... does anybody knows ?

zQUEz 12-16-2011 05:28 AM

Quote:

I must accept new certificate.
this is the error TenTenths was referring. Having a third party signed cert gets automatically accepted because that third party root cert is already packaged with the major web browsers.
If you installed, say, Firefox and removed all the root certs, you would have to accept ALL certs whether they are third party signed or not.

lithos 12-16-2011 10:08 AM

maybe cacert could be your help.


All times are GMT -5. The time now is 01:36 AM.