SEC260 Configuring Apache for HTTPS - eitan-j/tech-journal GitHub Wiki

  • setup server

  • cp websrv.crt /etc/pki/tls/certs/websrv.crt

  • cp websrv.key /etc/pki/tls/private/websrv.key

  • yum install mod_ssl -y

  • edit /etc/httpd/conf.d/ssl.conf

  • set SSLCertificateFile to /etc/pki/tls/certs/websrv.crt

  • set SSLCertificateKeyFile to /etc/pki/tls/private/websrv.key

  • firewall-cmd --permanent --add-port=443/tcp

  • firewall-cmd --permanent --remove-port=80/tcp

  • firewall-cmd --reload

  • systemctl restart httpd

  • enter password

  • in the future, must restart httpd manually to enter password