LPIC-2 208.2 Apache Configuration for HTTPS

• Weight: 3
• Description: Candidates should be able to configure a web server to provide HTTPS.

Key Knowledge Areas

• SSL configuration files, tools and utilities
• Ability to generate a server private key and CSR for a commercial CA
• Ability to generate a self-signed Certificate from private CA
• Ability to install the key and Certificate
• Awareness of the issues with Virtual Hosting and use of SSL
• Security issues in SSL use

Terms and Utilities

• Apache2 configuration files
• /etc/ssl/*, /etc/pki/*
• openssl, CA.pl
• SSLEngine, SSLCertificateKeyFile, SSLCertificateFile, SSLCertificateChainFile
• SSLCACertificateFile, SSLCACertificatePath
• SSLProtocol, SSLCipherSuite, ServerTokens, ServerSignature, TraceEnable