|
@@ -6538,6 +6538,24 @@ cp /etc/ssl/private/$HOSTNAME.new.key /etc/ssl/private/$HOSTNAME.key
|
6538
|
6538
|
shred -zu /etc/ssl/private/$HOSTNAME.new.key
|
6539
|
6539
|
#+END_SRC
|
6540
|
6540
|
|
|
6541
|
+Edit your Apache configuration file.
|
|
6542
|
+
|
|
6543
|
+#+BEGIN_SRC: bash
|
|
6544
|
+emacs /etc/apache2/sites-available/$HOSTNAME
|
|
6545
|
+#+END_SRC
|
|
6546
|
+
|
|
6547
|
+Add the following to the section which starts with
|
|
6548
|
+
|
|
6549
|
+#+BEGIN_SRC: bash
|
|
6550
|
+ SSLCertificateChainFile /etc/ssl/chains/startssl-sub.class1.server.ca.pem
|
|
6551
|
+#+END_SRC
|
|
6552
|
+
|
|
6553
|
+Save and exit, then restart apache.
|
|
6554
|
+
|
|
6555
|
+#+BEGIN_SRC: bash
|
|
6556
|
+service apache2 restart
|
|
6557
|
+#+END_SRC
|
|
6558
|
+
|
6541
|
6559
|
Now visit your web site at https://mydomainname.com and you should notice that there is no certificate warning displayed. You will now be able to install systems which don't allow the use of self-signed certificates, such as [[https://redmatrix.me/&JS=1][Red Matrix]].
|
6542
|
6560
|
|
6543
|
6561
|
* Deprecated
|