Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (herse.apache.org: domain of brunoteixa@gmail.com
 designates 66.249.82.238 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:user-agent:mime-version:to:subject:references:in-reply-to:content-type:content-transfer-encoding;
        b=M6TffZEL6vvLX8/+66rMk0MeLtgxhSIi0NLX/4jHAxoI3Lzg6ukVfGt+A0g+9AMRU7jmgRJb6DwmY9lWTWB5dRp0R1HmyoONVA/z4vm7MGeAhUiukocWQrkpmNXptpo2GCgVEi/EvLTspln9yqypMWgjgDZ/OAUI7ClP7N8flIo=
Message-ID: <45DC304D.3080208@gmail.com>
Date: Wed, 21 Feb 2007 11:43:09 +0000
From: Bruno Teixeira <brunoteixa@gmail.com>
User-Agent: Thunderbird 1.5.0.9 (X11/20070103)
MIME-Version: 1.0
To: users@httpd.apache.org
References: <45DC2170.3040801@ita.org.mo> <45DC24EC.6030703@gmail.com>
 <45DC2B24.90201@ita.org.mo>
In-Reply-To: <45DC2B24.90201@ita.org.mo>
Content-Type: text/plain; charset=Big5
Content-Transfer-Encoding: 7bit
Subject: Re: [users@httpd] [Fwd: Root CA ( SSL ) of Web Service]

Hi,

SSLCertificateFile and SSLCertificateKeyFile are for your certificate
and key - they can be self signed or signed by a CA. If they are signed
by a CA, you shoud use the SSLCertificateChainFile directive for the
root and possibly the intermidiate certificate.

You should check out the manual: http://httpd.apache.org/docs/2.0/ssl/

The faq is very helpful, but take some time to read the hole thing.

Take care

edwardspl@ita.org.mo wrote:
> Hello Bruno,
> 
> So...what is the CA come from the Web ?
> 
> SSLCertificateFile /etc/pki/tls/certs/localhost.crt
> SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
> 
> Is it a sample of Root CA ?
> 
> Edward.
> 
> Bruno Teixeira wrote:
> 
>> Edward,
>>
>> the SSLCertificateChainFile directive should indicate a file with both
>> the root and intermediate certificates.
>>
>> http://certs.ipsca.com/support
>>
>> Take care.
>>
>> Bruno Teixeira
>>
>> edwardspl@ita.org.mo wrote:
>>
>>>
>>> -------- Original Message --------
>>> Subject: Root CA ( SSL ) of Web Service
>>> Date: Wed, 21 Feb 2007 18:11:51 +0800
>>> From: edwardspl@ita.org.mo
>>> Reply-To: For users of Fedora <fedora-list@redhat.com>
>>> To: fedora-list@redhat.com <fedora-list@redhat.com>
>>>
>>>
>>>
>>> Dear All,
>>>
>>> For apache 2.x, which command Syntax for Root CA ?
>>>
>>> SSLCertificateFile /etc/pki/tls/certs/localhost.crt
>>> SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
>>> #SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt
>>> #SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt
>>>
>>> Edwad.
>>>
>>> -- 
>>> fedora-list mailing list
>>> fedora-list@redhat.com
>>> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
>>>
>>>
>>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server
>> Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>> " from the digest: users-digest-unsubscribe@httpd.apache.org
>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>>
> 
> 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 
> 


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org