apache2 + ssl + debian + virtual hosts

Install apache2

sudo apt-get install apache2

Activate module and website

sudo a2ensite default-ssl sudo a2enmod ssl

Restart apache

sudo /etc/init.d/apache2 restart

Generate self-signed certificates

sudo mkdir /etc/apache2/ssl sudo /usr/sbin/make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/apache2/ssl/apache.crt

In the last command put the name of your server.

The create the two files out of the crt file

cd /etc/apache2/ssl sudo cp apache.crt apache.pem sudo cp apache.crt apache.key

Edit this files and only leave the certificate key in the .pem file and the private key in the .key file

Then edit /etc/apache2/sites-available/defaul-ssl and change to this:

SSLCertificateFile /etc/apache2/ssl/apache.pem SSLCertificateKeyFile /etc/apache2/ssl/apache.key

Change permissions of the private key

sudo chmod 600 /etc/apache2/ssl/apache.key

Restart again

sudo /etc/init.d/apache2 restart

Disable http port. Edit /etc/apache2/ports.conf and comment:

#NameVirtualHost *:80 #Listen 80

To have virtual hosts in ssl create a map file /etc/apache2/ssl_map with the server names and their respective document roots:

www.example.com /var/www wiki.example.com /usr/share/dokuwiki

To the file /etc/apache2/sites-available/default-ssl inside the VirtualHost section add the following lines:

### Mass SSL Vhosts ### RewriteEngine on
# define two maps: one for fixing the URL and one which defines # the available virtual hosts with their corresponding # DocumentRoot. RewriteMap lowercase int:tolower RewriteMap vhost txt:/etc/apache2/sslmap
# 1. make sure we don't map for common locations RewriteCond %{REQUESTURI} !^/cgi-bin/. RewriteCond %{REQUESTURI} !^/icons/.
# 2. make sure we have a Host header RewriteCond %{HTTPHOST} !^$
# 3. lowercase the hostname RewriteCond ${lowercase:%{HTTPHOST}|NONE} ^(.+)$ # # 4. lookup this hostname in vhost.map and # remember it only when it is a path # (and not “NONE” from above) RewriteCond ${vhost:%1} ^(/.)$
# 5. finally we can map the URL to its docroot location # and remember the virtual host for logging puposes RewriteRule ^/(.*)$ %1/$1 [E=VHOST:${lowercase:%{HTTPHOST}}] * We need the rewrite module: sudo a2enmod rewrite * Restart apache2 and voila!