Installer les logiciels
yum install mod_ssl openssl
Générer un certificat auto-signé
# Générer la clé privée openssl genrsa -out cacert.key 1024 # Générer la CSR (Certificate Signing Request) openssl req -new -key cacert.key -out cacert.csr # Générer la clé auto-signée openssl x509 -req -days 3650 -in cacert.csr -signkey cacert.key -out cacert.crt # Copier les fichiers dans les dossiers suivant cp cacert.crt /etc/pki/tls/certs cp cacert.key /etc/pki/tls/private/cacert.key cp cacert.csr /etc/pki/tls/private/cacert.csr
NB : Vérifier un Certificat :
openssl x509 -in certificate.crt -text -noout
Modifier la configuration apache
vi /etc/httpd/conf.d/ssl.conf
Et modifier les chemins :
SSLCertificateFile /etc/pki/tls/certs/ca.crt SSLCertificateKeyFile /etc/pki/tls/private/ca.key
Recharger enfin apache.
Configurer les virtual hosts
NameVirtualHost *:443 # Ne pas oublier cette directive !
<VirtualHost *:443>
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/ca.crt
SSLCertificateKeyFile /etc/pki/tls/private/ca.key
<Directory /var/www/vhosts/vitresite.com/httpsdocs>
AllowOverride All
</Directory>
DocumentRoot /var/www/vhosts/votresite.com/httpsdocs
ServerName votresite.com
</VirtualHost>
<VirtualHost *:443>
ServerAdmin info@domaine.fr
ServerName glpi.domaine.fr:443
DocumentRoot /var/www/html/glpi
DirectoryIndex index.html index.htm index.shtml index.php
# Logfiles
ErrorLog /var/log/httpd/error-glpi.log
CustomLog /var/log/httpd/access-glpi.log combined
SSLEngine ON
SSLCertificateFile /etc/httpd/conf.d/ssl.crt
SSLCertificateKeyFile /etc/httpd/conf.d/ssl.key
</VirtualHost>
Puis recharger apache.