Install pubcookie

From Web3us, LLC
Jump to: navigation, search

Single Sign On options

Installing Pubcooke

Enable SSL

*Step 1: Generate a Private Key

# openssl genrsa -des3 -out server.key 1024
Generating RSA private key, 1024 bit long modulus
e is 65537 (0x10001)
Enter pass phrase for server.key: slyfamily
Verifying - Enter pass phrase for server.key:

* Step 2: Generate a CSR (Certificate Signing Request)

# openssl req -new -key server.key -out server.csr
Enter pass phrase for server.key:
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
Country Name (2 letter code) [GB]:US
State or Province Name (full name) [Berkshire]:Utah
Locality Name (eg, city) [Newbury]:Salem
Organization Name (eg, company) [My Company Ltd]:Web3us LLC
Organizational Unit Name (eg, section) []:Information Technology
Common Name (eg, your name or your server's hostname) []
Email Address []

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:visitor1
An optional company name []:Web3us, LLC

* Step 3: Remove Passphrase from Key

# cp server.key
#  openssl rsa -in -out server.key
Enter pass phrase for
writing RSA key

* Step 4: Generating a Self-Signed Certificate

# openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
Signature ok
subject=/C=US/ST=Utah/L=Salem/O=Web3us LLC/OU=Information Technology/
Getting Private key

* Step 5: Installing the Private Key and Certificate

# pwd

#cp /opt/ssl/server.crt /etc/httpd/conf/server.crt
# cp /opt/ssl/server.key /etc/httpd/conf/server.key

* Step 6: Configuring SSL Enabled Virtual Hosts

SSLEngine on
SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt
SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/server.key
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

Step 7: Restart Apache and Test

/etc/init.d/httpd stop
/etc/init.d/httpd stop

Configure Virtual Hosts