====== Howto configure SSL support for Apache web server ======

The [[http://www.apache.org/|Apache]] web server supports SSL for secure HTTP browsing. SSL allows the encryption of all HTTP communications between the browser and the web server using public key cryptography. This howto explains how to add SSL support to the Apache web server.

===== Prepare SSL certificates =====
For this, refer to [[manipulating_pki_certificates|PKI SSL certificate management with OpenSSL]].


===== Edit httpd.conf =====

httpd.conf is the Apache configuration file. We need to load the Apache SSL modules. 


<code>
LoadModule ssl_module         libexec/apache/libssl.so
AddModule mod_ssl.c
</code>

And create a //VirtualHost// entry for each hosted domain. For example, for the domain example.com, we would add 

<code>

<VirtualHost 111.111.111.111:443>

DocumentRoot "/usr/local/www/website-root"
ServerName example.com
ServerAdmin you@example.com
ErrorLog /var/log/httpd-error.log
TransferLog /var/log/httpd-access.log
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /path/to/cert.pem
SSLCertificateKeyFile /path/to/key.pem

<Files ~ "\.(cgi|shtml|phtml|php3?)$">
    SSLOptions +StdEnvVars
</Files>

<Directory "/usr/local/www/website-root/cgi-bin">
    SSLOptions +StdEnvVars
</Directory>

</VirtualHost>

</code>



{{tag>services security}}


~~DISCUSSION~~