When we're looking at configuring HTTPS, there's really a few steps involved.
The first thing to do is enable the ssl module in Apache. It's this
module that allows the Apache server to read in the configuration for
our SSL and to enable the correct processes.
Once we've done that,
we need to then use openssl to generate a key pair that we can use.
Now we go through each of these steps in a little bit
more detail in the demonstration, but a dialogue box is going to be opened.
The only answer that we really need to answer and
answer correctly is our Common Name.
I'm going to be using the Common Name of ubuntu, but we should be using the
name that clients are going to use to access the web server.
We can then go through and look at editing our configuration.
We're going to the default‑ssl site.
This isn't enabled at the moment, but it's there.
We can go through, make sure that we add in our ServerName directive.
This is what was missing before when we're looking at the
configuration out of the box. But the ServerName will have to be added
both to the SSL site and the standard default site.
We can specify the CertificateKey and the CertificateFile that we are
using. And this then becomes the key pair that we've just generated.
By default, there is a key pair that we could use, but this is
generated by the system and has the name snakeoil, and we probably
don't want to use something called snakeoil, do we? Once we've
configured our site,
we need to enable the site. Much like enabling the module, we need to
create a link to the site so it becomes enabled.
But we have these simple commands that manage this for us.
Having changed our configuration of Apache,
we need to make sure that we restart the Apache server.
Now this is just one slide,
but there's an awful amount of information on here. So do follow through
and follow through carefully in the next demonstration,
where we're going to explain each one of these steps in a little bit more detail.