RHEL5中http中ssl模块的配置，主要是证书、私钥的制作

rhel4和rhel5中位置发生了点变化，所以证书创建位置也有所不同。如下所示：

RHEL4的路径：
[root@minot conf]# pwd
/etc/httpd/conf
[root@minot conf]# tree ./
./
|-- Makefile -> ../../../usr/share/ssl/certs/Makefile
|-- httpd.conf
|-- magic
|-- ssl.crl
|   `-- Makefile.crl
|-- ssl.crt
|   |-- Makefile.crt
|   `-- server.crt
|-- ssl.csr
|-- ssl.key
|   `-- server.key
`-- ssl.prm

5 directories, 7 files
[root@minot conf]# make
This makefile allows you to create:
 o public/private key pairs
 o SSL certificate signing requests (CSRs)
 o self-signed SSL test certificates

To create a key pair, run "make SOMETHING.key".
To create a CSR, run "make SOMETHING.csr".
To create a test certificate, run "make SOMETHING.crt".
To create a key and a test certificate in one file, run "make SOMETHING.pem".

To create a key for use with Apache, run "make genkey".
To create a CSR for use with Apache, run "make certreq".
To create a test certificate for use with Apache, run "make testcert".

Examples:
 make server.key
 make server.csr
 make server.crt
 make stunnel.pem
 make genkey
 make certreq
 make testcert

 

RHEL5的路径：
[root@server certs]# pwd
/etc/pki/tls/certs
[root@server certs]# tree ./
./
|-- Makefile
|-- ca-bundle.crt
|-- localhost.crt
|-- make-dummy-cert
|-- server.crt
`-- server.csr

0 directories, 6 files
[root@server certs]# make
This makefile allows you to create:
 o public/private key pairs
 o SSL certificate signing requests (CSRs)
 o self-signed SSL test certificates

To create a key pair, run "make SOMETHING.key".
To create a CSR, run "make SOMETHING.csr".
To create a test certificate, run "make SOMETHING.crt".
To create a key and a test certificate in one file, run "make SOMETHING.pem".

To create a key for use with Apache, run "make genkey".
To create a CSR for use with Apache, run "make certreq".
To create a test certificate for use with Apache, run "make testcert".

To create a test certificate with serial number other than zero, add SERIAL=num

Examples:
 make server.key
 make server.csr
 make server.crt
 make stunnel.pem
 make genkey
 make certreq
 make testcert
 make server.crt SERIAL=1
 make stunnel.pem SERIAL=2
 make testcert SERIAL=3

描述：这台提供服务https的主机名是server.rhel5.com。原有的配置文件/etc/httpd/conf.d/ssl.conf

[root@server conf.d]# httpd -S
VirtualHost configuration:
wildcard NameVirtualHosts and _default_ servers:
_default_:443          server.rhel5.com (/etc/httpd/conf.d/ssl.conf:81)
Syntax OK

[root@server conf.d]# cat ssl.conf
.............
SSLCertificateFile /etc/pki/tls/certs/locale.crt
SSLCertificateKeyFile /etc/pki/tls/private/locale.key
..................