server ssl cert help.

[Shimo]

So one thing my server has been lacking for a long time now is a ssl certificate for https connections. I unfortunately have no idea how to add it in. I already know where 99% of the config files are for my apache install and other modules and etc. Any help would be great.

[bad_brain]

it's actually pretty simple and done in a few minutes, have a look here:

http://www.debian-administration.org/articles/349" onclick="window.open(this.href);return false;

if you want to use SSL for multiple domains it's a little more tricky because SSL certificates are valid on an per-IP basis and not on a per-domain one, in this case have a look here:

http://blog.revolunet.com/index.php/res ... th-apache2" onclick="window.open(this.href);return false;

[Shimo]

Hmmmm, on a per ip basis? That bothers me a little..... My server is set up behind a router, it's ip is 192.168.*.* And the router get''s it's ip from the cable modem, 68.*.*.*, Something tell's me that this is going to cause a lot of problems for me.....

[bad_brain]

um, well, I was a little unclear, actually it's a "one domain per IP" basis.
but when you are using a self-signed certificate (I doubt you will buy one, right?) the browsers will complain about an "insecure certificate blah" anyway because it's not signed by a known authority. for a 100% working (I mean "without browser warning") SSL setup you would need s static IP (public one) plus pay for a certificate from a well known authority (simply check the known CAs in your browser settings).
for home use and even for non-business use it's not that tragic when the browser returns a warning because there is something "wrong" with the certificate, it will still work properly when the user adds an exception in the browser.
on suck-o we use a self-signed certificate for example, and the browser also drops a warning because of that...but who cares...

[Shimo]

Well I know about "trusted cert's" lol What a bloody waste of time that ever was. But yeah wasn't sure about ip. I'll have to let you know how it works out then. Means I'll actually get to use my home web based proxy for logins at sites too. (Girlfriend uses it from work all the time.)