Skip navigation
All People > Patrick-Dussault > Patrick Dussault's Blog > 2016 > October

To create quickly a Certificate to configure Apache or SPS with ssl :


#  mkdir certificate
#  cd certificate/
#  openssl genrsa -des3 -out server.key 1024
#  openssl req -config /etc/ssl/openssl.cnf -new -key server.key -out server.csr

here's a sample of the configuration  :


Country Name (2 letter code) [AU]:ES
State or Province Name (full name) [Some-State]:Barcelona
Locality Name (eg, city) []:Barcelona
Organization Name (eg, company) [Internet Widgits Pty Ltd]:CA
Organizational Unit Name (eg, section) []:Support
Common Name (e.g. server FQDN or YOUR name) []
Email Address []:


Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:


#  openssl x509 -in server.csr -out server.crt -req -signkey server.key -days 365
       give the password you give when creating the server.key


Then use the server.key along with the server.crt to configure ssl for your server.


To remove the passphrase from the server.key :


# cp -p server.key server.key.orig
# openssl rsa -in server.key -out
Enter pass phrase for server.key:
writing RSA key
# cp /opt/apache2416/conf/server.key
# cp: overwrite ‘/opt/apache2416/conf/server.key’? y


Note that on some distributions, the default openssl configuration file is located here :




So you probably want to adjust the openssl command accordingly where this path is needed.

Here are the fast tracks to compile the NSS libraries on your Linux box :


To install and compile NSS Library 32bit on RedHat 6 64bit.


1 - Download nss-3.20.2-with-nspr-4.10.10.tar.gz




2 - Insure that sqlite 32bit libraries are available on the system


    # yum install sqlite-devel.i686


3 - Decompress and unarchive the package and get in the repository :


    # tar zxvf nss-3.20.2-with-nspr-4.10.10.tar.gz
    # cd nss-3.20.2


4 - Compile the NSS Libraries :


    # export CFLAGS=-m32 && gmake BUILD_OPT=1 \
    NSS_USE_SYSTEM_SQLITE=1 -j1 nss_build_all


5 - You'll find then the binaries libraries in :