EX300(23Q) · Question #13
configure the website https://serverX.example.com with TLS
yum install -u mod_ssl wget http://classroom.example.com/pub/rhce/tls/certs/system1.networkX.crt wget http://classroom.example.com/pub/rhce/tls/private/system1.networkX.key wget http://classroom.example.com/pub/example-ca.crt mv system1.network1.crt /etc/pki/tls/certs/ mv…
Question
- configure the website https://serverX.example.com with TLS
Explanation
yum install -u mod_ssl
wget http://classroom.example.com/pub/rhce/tls/certs/system1.networkX.crt wget http://classroom.example.com/pub/rhce/tls/private/system1.networkX.key wget http://classroom.example.com/pub/example-ca.crt
mv system1.network1.crt /etc/pki/tls/certs/ mv system1.network1.key /etc/pki/tls/private/ mv example-ca.crt /etc/pki/tls/certs/
Very Important, Fix the Permission on Key File
chmod 0600 /etc/pki/tls/private/system1.network1.key
vim /etc/httpd/conf.d/server1.conf (Add the following) <VirtualHost *:443> ServerName server1.example.com DocumentRoot /var/www/html
SSLEngine on SSLCertificateFile /etc/pki/tls/certs/system1.network1.crt SSLCertificateKeyFile /etc/pki/tls/private/system1.network1.key #SSL_CertificateChainFile /etc/pki/tls/certs/server-chain.crt
</VirtualHost>firewall-cmd --permanent --add-service=https firewall-cmd --reload
Topics
Community Discussion
No community discussion yet for this question.