I have a question about SSL certificate...
I have generate a certificate using this keytool command..
keytool -genkey -alias myalias -keyalg RSA -keysize 2048
and I used this command to export the certificate
keytool -export -alias myalias -file certificate.crt
So, I have a file .crt
Now I would to configure my Apache ssl module.
I need to use keytool...At the moment I can't to use Openssl
How can I configure the module if I have only this certificate.crt file? I see these sections in my ssl.conf
# Server Certificate: # Point SSLCertificateFile at a PEM encoded certificate. If # the certificate is encrypted, then you will be prompted for a # pass phrase. Note that a kill -HUP will prompt again. A new # certificate can be generated using the genkey(1) command. #SSLCertificateFile /etc/pki/tls/certs/localhost.crt # Server Private Key: # If the key is not combined with the certificate, use this # directive to point at the key file. Keep in mind that if # you've both a RSA and a DSA private key you can configure # both in parallel (to also allow the use of DSA ciphers, etc.) #SSLCertificateKeyFile /etc/pki/tls/private/localhost.key # Server Certificate Chain: # Point SSLCertificateChainFile at a file containing the # concatenation of PEM encoded CA certificates which form the # certificate chain for the server certificate. Alternatively # the referenced file can be the same as SSLCertificateFile # when the CA certificates are directly appended to the server # certificate for convinience. #SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt
How can I configure the correct section?