Created How to create and configure SSL (markdown)

Thomas Pointhuber 2015-04-28 12:29:44 +02:00
parent 055a2a6a15
commit 38b47d9d89
1 changed files with 52 additions and 0 deletions

@ -0,0 +1,52 @@
## Create Keypair
**RSA 2048 Bit**
```
openssl genrsa -out searx.key 2048
```
**RSA 4096 Bit**
```
openssl genrsa -out searx.key 4096
```
## Create Certificate Request (CSR)
**SHA256**
```
openssl req -new -key searx.key -out searx.csr -new -sha256
```
## Free SSL-Certificate Authorities
### StartSSL
https://www.startssl.com
1. Register and authenticate your server
2. create keypair and csr
3. create certificate (with own key)
4. ...
**You have to add a ChainFile on your server, so the client can work without problems**
```
wget http://www.startssl.com/certs/sub.class1.server.ca.pem
```
Add the folllowing command into your apache configuration:
```
SSLCertificateChainFile /etc/ssl/certs/sub.class1.server.ca.pem
```
TODO: Ngnix
### Let's Encrypt
https://letsencrypt.org
comming soon
### GlobalSign
https://www.globalsign.com/en/ssl/ssl-open-source/