[OT]: apache-ssl y el certificado.

[Jaume Sabater <jaume@argus.es>]

Perdonen el Off-Topic...

Vamos, que estoy intentando que rule lo del certificado del apache-ssl, me
curro un certificado haciendo:

openssl req -new > new.cert.csr
[bla bla bla, todo ok]
openssl rsa -in privkey.pem -out new.cert.key
[todo ok]
openssl x509 -in new.cert.csr -out new.cert.cert -req -signkey new.cert.key
-days 365
[todo ok]

En el /etc/apache-ssl/httpd.conf, tengo

# Set the CA certificate verification path (must be PEM encoded).
# (in addition to getenv("SSL_CERT_DIR"), I think).
SSLCACertificatePath /etc/apache-ssl

[Correcto, lo hago en ese directorio]


# Set the CA certificate verification file (must be PEM encoded).
# (in addition to getenv("SSL_CERT_FILE"), I think).
#SSLCACertificateFile /some/where/somefile
#SSLCACertificateFile /u/ben/apache/apache_1.2.5-ssl/SSLconf/conf/httpsd.pem
[Qué debo poner aquí???]


# Point SSLCertificateFile at a PEM encoded certificate.
# If the certificate is encrypted, then you will be prompted for a pass
phrase.
# Note that a kill -1 will prompt again.
# A test certificate can be generated with "make certificate".
#SSLCertificateFile /etc/apache-ssl/privkey.pem
SSLCertificateFile /etc/apache-ssl/apache.pem
#SSLCertificateFile /u/ben/apache/apache_1.2.6-ssl/SSLconf/conf/t1.pem
[He probao también el privkey.pem, pero na...]


# If the key is not combined with the certificate, use this directive to
# point at the key file. If this starts with a '/' it specifies an absolute
# path, otherwise it is relative to the default certificate area. That is, it
# means "<default>/private/<keyfile>".
#SSLCertificateKeyFile /some/place/with/your.key


Pero parece que na... no arranca, el apache-ssl... Esas instrucciones las
he sacado de www.apache-ssl.org. Alguna sugerencia?

Gracias mil...

=====================
Jaume Sabater i Lleal
mailto:jaume@argus.es
=====================