Web Security, Privacy & Commerce, 2nd Edition

Chapter 17. Deploying SSL Server Certificates

This chapter describes how to create and install SSL (Secure Sockets Layer) certificates using the Open SSL implementation and the Apache mod_ssl module on the FreeBSD operating system. (See Chapter 5 for basic information on SSL. See Chapter 6 and Chapter 7 for information about digital certificates.) We will also show you how to get a certificate that is signed by the VeriSign certification authority. The process is decribed in detail to give you a feel for how the mechanics of the process work. However, as it is likely you will be performing this process with different software than described here, refer to your own documentation before beginning the procedure.

Planning for Your SSL Server

To set up a cryptographically enabled web server, you must complete these steps:

1. Plan your SSL installation. Why do you want to use SSL? What protocols do you want to use with SSL? Which server will you be using? Where will you be keeping your web server’s private key? Do you want it to be possible for people to connect to your server without using SSL? Make sure that you know the answers to these questions before you proceed to avoid any false starts.

2. Obtain a web server that supports SSL. Most likely, you will either download your web server over the Internet or install it from a CD-ROM.

3. Install the web server.

4. Create a private/public key pair for your web server.

5. Create your own self-signed certificate so you can test your installation and get your ...