Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have to install SSL on my server centos 6 apache 2.2 server.

First I have genetraeted CSR files as directed on below link

and sent the generated files to my client. client has purchased ssl certificate and sent me below files.

Can anyone please let me know what should be next steps where I have to upload these files ?

I have googled for if but am getting confused. I have all server permissions.

Please let me know.

Thanks in Advance.

share|improve this question
There are instructions on the site where your client got the certificate:… – Ladadadada Aug 1 '13 at 9:18
up vote 1 down vote accepted

You need to install mod_ssl

# yum install mod_ssl

and then modify /etc/httpd/conf.d/ssl.conf

LoadModule ssl_module modules/
Listen 443

SSLPassPhraseDialog  builtin
SSLSessionCache         shmcb:/var/cache/mod_ssl/scache(512000)
SSLSessionCacheTimeout  300

SSLMutex default

SSLRandomSeed startup file:/dev/urandom  256
SSLRandomSeed connect builtin
SSLCryptoDevice builtin

<VirtualHost *:443>

    DocumentRoot /var/www/
    DirectoryIndex index.php index.html

    <Directory /var/www/>
        Options -Indexes
        AllowOverride All
        Order allow,deny
        Allow from all

    ErrorLog logs/ssl_error_log
    TransferLog logs/ssl_access_log
    LogLevel warn

    SSLEngine on
    SSLProtocol all -SSLv2

    SSLCertificateFile /etc/pki/httpd/
    SSLCertificateChainFile /etc/pki/httpd/sf_bundle.crt
    SSLCACertificateFile /etc/pki/httpd/cert.pem

    <Files ~ "\.(cgi|shtml|phtml|php3?)$">
        SSLOptions +StdEnvVars
    <Directory "/var/www/cgi-bin">
        SSLOptions +StdEnvVars

    SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

    CustomLog logs/ssl_request_log "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"


Note: If the key is not combined with the certificate, you must specify SSLCertificateKeyFile directive to point at the key file.

You can get more info at

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.