Working with OpenSSL and Httpd

Run yum install mod_ssl, and accept the prompts.

1. Create a new encrypted private key.

openssl genrsa -aes128 -out /etc/pki/tls/private/httpdkey.pem

1. Enter httpd at the passphrase prompt.
2. Generate a self-signed certificate using the key.

openssl req -new -x509 -key /etc/pki/tls/private/httpdkey.pem -out /etc/pki/tls/certs/httpdcert.pem -days 365

1. Enter httpd at the passphrase prompt.
2. At the prompts, enter the field information provided in the instructions (use defaults where not specified).

1. Make the following changes to /etc/httpd/conf.d/ssl.conf:

   • At the end of the <VirtualHost _default_:443> section, add the following on a new line:
     • ServerName shop.example.com:443
   • Locate the line SSLCertificateFile /etc/pki/tls/certs/localhost.crt, and change it to the following:
     • SSLCertificateFile /etc/pki/tls/certs/httpdcert.pem
   • Locate the line SSLCertificateKeyFile /etc/pki/tls/private/localhost.key, and change it to the following:
     • SSLCertificateKeyFile /etc/pki/tls/private/httpdkey.pem

2. Restart httpd to put the changes into effect.

systemctl restart httpd

2. Enter httpd at the passphrase prompt.
3. Open port 443 on the OS firewall.

sudo firewall-cmd --add-service=https --permanent 
sudo firewall-cmd --reload

1. On the workstation machine, run the following command:

openssl s_client -connect shop.example.com:443 > /home/cloud_user/httpd_output

**Note:** The OpenSSL `s_client` will briefly wait for input before terminating the connection. You may either interrupt the running command or let it close automatically. No further input is required.