I’ve got a .pfx and CA’s crt. I have to add it to my Apache’s SSL config.<\/p>\n
1. Collect CA’s certificates in one file – cmd for windows:<\/p>\n
copy \/B ServerCA.crt + TrustCA.crt mycert.ca-bundle<\/p><\/blockquote>\n
2. Export a private key:<\/p>\n
openssl pkcs12 -in mycert.pfx -nocerts -out mycert_key.pem -nodes<\/p><\/blockquote>\n
3. Export a certificate:<\/p>\n
openssl pkcs12 -in mycert.pfx -nokeys -out mycert.pem<\/p><\/blockquote>\n
4. Remove passphrase from the certificate:<\/p>\n
openssl rsa -in mycert_key.pem -out mycert.key<\/p><\/blockquote>\n
5. Configure Apache e.g.:<\/p>\n
<VirtualHost *:443>
\nServerName my.site.net:443
\nServerAlias www.my.site.net
\nDocumentRoot “C:\/Apache\/htdocs\/mysite”
\nErrorLog “logs\/mysite-error.log”
\nCustomLog “logs\/mysite-access.log” common
\nSSLEngine on
\nSSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:-SSLv2:+SSLv3:+TLSv1:+EXP:+eNULL
\nSSLCertificateFile “C:\/Apache\/conf\/ssl\/mycert.pem”
\nSSLCertificateKeyFile “C:\/Apache\/conf\/ssl\/mycert.key”
\nSSLCertificateChainFile “C:\/Apache\/conf\/ssl\/mycert.ca-bundle”
\n<FilesMatch “\\.(cgi|shtml|phtml|php)$”>
\nSSLOptions +StdEnvVars
\n<\/FilesMatch>
\n<Directory “C:\/Apache\/cgi-bin”>
\nSSLOptions +StdEnvVars
\n<\/Directory>
\nBrowserMatch “.*MSIE.*” \\
\nnokeepalive ssl-unclean-shutdown \\
\ndowngrade-1.0 force-response-1.0
\nCustomLog “C:\/Apache\/logs\/ssl_request.log” \\
\n“%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \\”%r\\” %b”
\n<\/VirtualHost><\/p><\/blockquote>\n<\/p>\n","protected":false},"excerpt":{"rendered":"
I’ve got a .pfx and CA’s crt. I have to add it to my Apache’s SSL config. 1. Collect CA’s certificates in one file – cmd for windows: copy \/B ServerCA.crt + TrustCA.crt mycert.ca-bundle 2. Export a private key: openssl pkcs12 -in mycert.pfx -nocerts -out mycert_key.pem -nodes 3. Export a certificate: openssl pkcs12 -in mycert.pfx […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13,1],"tags":[],"class_list":["post-690","post","type-post","status-publish","format-standard","hentry","category-novosti","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/posts\/690","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dety.net.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=690"}],"version-history":[{"count":1,"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/posts\/690\/revisions"}],"predecessor-version":[{"id":691,"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/posts\/690\/revisions\/691"}],"wp:attachment":[{"href":"https:\/\/dety.net.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=690"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dety.net.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=690"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dety.net.ua\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=690"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}