Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents
Configuring SSL

...

  1. Copy the certificate files to ${apache_home}/conf/CSR/

  2. Open "${apache_home}/conf/httpd.conf" file 

  3. a) Search for the "LoadModule ssl_module modules/mod_ssl.so" and remove any pound sign(#) at the start of the line (i.e. uncomment it)

    b) If this line is not found in the file, then it means that the SSL module is not installed. Please install this depending on the OS of the server.
                    For CentOS - yum install mod_ssl

  4. Skip this step if you installed SSL module manually i.e (3.2)

    Add below section at the end of the file httpd.conf file after replacing the dummy values with the real one. 

    Code Block
    Listen 443
    <VirtualHost *:443>
        DocumentRoot "D:\OpenSpecimen\Apache2.2\htdocs"
        ServerAdmin biobank@yourdomain.edu
        ServerName biobank.yourdomain.edu
        SSLEngine on
        SSLCertificateFile "D:\OpenSpecimen\Apache2.2\conf\CSR\biobank_cert.crt"
        SSLCertificateKeyFile "D:\OpenSpecimen\Apache2.2\conf\CSR\biobank.key"
    	RedirectMatch ^/$ /openspecimen
        ProxyPass /openspecimen ajp://localhost:8009/openspecimen
        ProxyPassReverse /openspecimen ajp://localhost:8009/openspecimen
    </VirtualHost>
     
    Note: Make sure that "SSLCertificateFile" and "SSLCertificateKeyFile" are properly located.
  5. In case of the new SSL module installation, edit /etc/httpd/conf.d/ssl.conf file and add below lines in <VirtualHost> tag.

    Code Block
    ServerAdmin biobank@yourdomain.edu
    ServerName biobank.yourdomain.edu
    SSLCertificateFile "D:\OpenSpecimen\Apache2.2\conf\CSR\biobank_cert.crt"
    SSLCertificateKeyFile "D:\OpenSpecimen\Apache2.2\conf\CSR\biobank.key"
    RedirectMatch ^/$ /openspecimen
    ProxyPass /openspecimen ajp://localhost:8009/openspecimen
    ProxyPassReverse /openspecimen ajp://localhost:8009/openspecimen
     
    Note: Remove existing entries for "SSLCertificateFile" and "SSLCertificateKeyFile".
     Also make sure files are located at specified path.

...