[EMAIL PROTECTED] wrote:
Thanks for the response. Also this is a development server.

the how-to document placed the .crt and .key files
in the following directories.

cp mars-server.crt /etc/httpd/conf/ssl.crt
cp mars-server.key /etc/httpd/conf/ssl.key
cp my-ca.crt /etc/httpd/conf/ssl.crt

These directories do not exist on this pc. Is there a default location under Apache2 where .crt and .key files need to be placed?

You can organize your certificates as you see fit. I don't use those locations, either, even if they are present. As I mentioned, the important thing is that they are stored securely in a place accessible by apache. This can vary from platform to platform, depending on the type of access controls that are in place. I don't use Solaris, but I typically place all server certs/keys in a hierarchy under /etc/ssl/. Some programs are picky about the format, but you can share a key/certificate pair among many services, so I store them centrally.

I run my CA on a workstation as an ordinary user and transfer the keys/certs as needed. Note that you don't need root privileges to run a CA, just to install the keys/certs on the destination.

There are backups of all of the conf files

Good man. :)


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to