Chapter 5. Online Certificate Status Protocol

Procedure 5.1. Configure Apache HTTP Server for SSL Connections

1. Install mod_ssl using the following command:

   # yum install mod_ssl

2. Edit JWS_HOME/httpd/conf.d/ssl.conf, and add ServerName, SSLCertificateFile, and SSLCertificateKeyFile:

   <VirtualHost _default_:443>
   ServerName www.example.com:443
   SSLCertificateFile /etc/pki/tls/certs/localhost.crt
   SSLCertificateKeyFile /etc/pki/tls/private/localhost.key

   1. ServerName must match the Common Name (CN) of the SSL certificate. If the ServerName does not match the CN, client browsers display domain name mismatch errors.
   2. The SSLCertificateFile is the private key associated with the certificate (the public key).
   3. Verify that the Listen directive in the ssl.conf file is correct as per your configuration. For example, if an IP address is specified, it must match the IP address the httpd service is bound to.
3. Restart httpd using the following command:

   # service httpd restart