nerdexam
Red_Hat

EX300(23Q) · Question #13

configure the website https://serverX.example.com with TLS

yum install -u mod_ssl wget http://classroom.example.com/pub/rhce/tls/certs/system1.networkX.crt wget http://classroom.example.com/pub/rhce/tls/private/system1.networkX.key wget http://classroom.example.com/pub/example-ca.crt mv system1.network1.crt /etc/pki/tls/certs/ mv…

Configure TLS Security for Apache

Question

Explanation

yum install -u mod_ssl

wget http://classroom.example.com/pub/rhce/tls/certs/system1.networkX.crt wget http://classroom.example.com/pub/rhce/tls/private/system1.networkX.key wget http://classroom.example.com/pub/example-ca.crt

mv system1.network1.crt /etc/pki/tls/certs/ mv system1.network1.key /etc/pki/tls/private/ mv example-ca.crt /etc/pki/tls/certs/

Very Important, Fix the Permission on Key File

chmod 0600 /etc/pki/tls/private/system1.network1.key

vim /etc/httpd/conf.d/server1.conf (Add the following) <VirtualHost *:443> ServerName server1.example.com DocumentRoot /var/www/html

SSLEngine on SSLCertificateFile /etc/pki/tls/certs/system1.network1.crt SSLCertificateKeyFile /etc/pki/tls/private/system1.network1.key #SSL_CertificateChainFile /etc/pki/tls/certs/server-chain.crt

</VirtualHost>

firewall-cmd --permanent --add-service=https firewall-cmd --reload

Topics

#Apache TLS/SSL#HTTPS virtual host#SSL certificate#mod_ssl

Community Discussion

No community discussion yet for this question.

Full EX300(23Q) Practice