Skip navigation
All People > Patrick-Dussault > Patrick Dussault's Blog > 2016 > October
2016

To create quickly a Certificate to configure Apache or SPS with ssl :

 

#  mkdir certificate
#  cd certificate/
#  openssl genrsa -des3 -out server.key 1024
#  openssl req -config /etc/ssl/openssl.cnf -new -key server.key -out server.csr

here's a sample of the configuration  :

 

Country Name (2 letter code) [AU]:ES
State or Province Name (full name) [Some-State]:Barcelona
Locality Name (eg, city) []:Barcelona
Organization Name (eg, company) [Internet Widgits Pty Ltd]:CA
Organizational Unit Name (eg, section) []:Support
Common Name (e.g. server FQDN or YOUR name) []:lodsun28d.ca.com
Email Address []:

 

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

 


#  openssl x509 -in server.csr -out server.crt -req -signkey server.key -days 365
       give the password you give when creating the server.key

 

Then use the server.key along with the server.crt to configure ssl for your server.

Here are the fast tracks to compile the NSS libraries on your Linux box :

 

To install and compile NSS Library 32bit on RedHat 6 64bit.

 

1 - Download nss-3.20.2-with-nspr-4.10.10.tar.gz

 

    from https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_20_2_RTM/src/

 

2 - Insure that sqlite 32bit libraries are available on the system

 

    # yum install sqlite-devel.i686

 

3 - Decompress and unarchive the package and get in the repository :

 

    # tar zxvf nss-3.20.2-with-nspr-4.10.10.tar.gz
    # cd nss-3.20.2

 

4 - Compile the NSS Libraries :

 

    # export CFLAGS=-m32 && gmake BUILD_OPT=1 \
    NSPR_INCLUDE_DIR=/usr/include USE_SYSTEM_ZLIB=1 ZLIB_LIBS=-lz \
    NSS_USE_SYSTEM_SQLITE=1 -j1 nss_build_all

 

5 - You'll find then the binaries libraries in :

 

    nss-3.20.2/dist/Linux2.6_x86_glibc_PTH_OPT.OBJ/