====== How to generate certificates for Apache ======
<code>
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout mysitename.key -out mysitename.crt</code>

Daca este eroare de openssl.cnf, se copiaza cu creare de directoare calea necesara catre openssl.cnf.\\
Dupa creare se copiaza mysitename.key si mysitename.crt in directorul din $apache/conf/extra si pe urma se editeaza httpd-ssl.conf\\




source: http://www.sslshopper.com/article-how-to-create-and-install-an-apache-self-signed-certificate.html, http://dev.antoinesolutions.com/apache-server/mod_ssl

====== How to check certificate ======
<code>
openssl x509 -in mysitename.crt -noout -text
openssl s_client -connect 127.0.0.1:443 -showcerts
lsof -i
</code>

====== How to generate public Certificate Signing Request (CSR) ======
<code>
openssl req -nodes -newkey rsa:2048 -keyout myserver.key -out server.csr
</code>

  - Create CA Bundle: https://support.comodo.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=1209

{{tag> ssl-certificate}}