Borland VisiBroker® 7.0 - Borland Technical Publications

Security for the Apache web serverCreating key and certificate filesNoteNoteThe VisiBroker Server provides the “openssl” utility so that you can generate therequired key and certificate files for mod_ssl. The openssl utility is located in:/bin//openssl/■For Windows, after double-clicking the openssl executable, a command windowappears.■For UNIX, simply follow the steps below.UNIX also requires a random data source for seeding. If you do not have a /dev/randdevice installed, you need to provide a file with a random number greater than 512bytes in length.The openssl executable first searches the environment for a variable named“RANDFILE”. If that is found, that value is assumed to be a file containing at least 512bytes of data. If the environment variable RANDFILE is not found, the executablesearches the root of your home directory for a .rnd. If that is found, it isassumed to contain at least 512 bytes of data for the seed. If you do not have a /dev/rand device, and do not provide any other alternative, certificate generation will fail.To generate the files:1 Create a private key for your server:OpenSSL> genrsa -out 2 Generate a certificate request:OpenSSL> req -new -key -out -config /bin//openssl.cnf3 Create a temporary certificate:OpenSSL> req -x509 -key -in -out -config /bin//openssl.cnfUsing the configuration from:/bin//openssl.cnfYou are prompted for the following information.Pressing Enter in response to each query (accepting each default value) is sufficientfor creating a temporary certificate.Using configuration from/bin//openssl.cnfYou are about to be asked to enter information that will be incorporated intoyour certificate request.What you are about to enter is what is called a Distinguished Name or aDN.There are quite a few fields but you can leave some blank.For some fields there will be a default value,If you enter '.', the field will be left blank.-----Country Name (2 letter code) [AU]:State or Province Name (full name) [Some-State]:Locality Name (such as, city) []:Organization Name (such as, company) [Internet Widgits Pty Ltd]:Organizational Unit Name (such as, section) []:Common Name (such as, YOUR name) []:Email Address []:Chapter 8: Security for the Web components 79