download openssl-0.9.6b.tar.gz from http://www.openssl.org/source


download mod_ssl-2.8.5-1.3.22.tar.gz from http://www.modssl.org/source


download apache_1.3.22.tar.Z from http://www.apache.org/dist/httpd/


In the directory where you downloaded all the above files:

# tar zxvf openssl-0.9.6b.tar.gz
# tar zxvf mod_ssl-2.8.5-1.3.22.tar.gz
# tar zxvf apache_1.3.22.tar.Z

Build openssl

# cd openssl-0.9.6b


# sh config 
# make 
# make test 
# make install
 

Build mod_ssl

# cd ../mod_ssl-2.8.5-1.3.22
# ./configure --with-apache=../apache_1.3.22

Build Apache

# cd ../apache_1.3.22

# SSL_BASE=../openssl-0.9.6b/ \
     ./configure --enable-module=ssl \
     --enable-module=so \
     --prefix=/usr/local/www/


# make 
# make certificate
# make install


Edit the  "httpd.conf" file in "/usr/local/www/conf/" as needed

Set the certificate, key, and intermediate certificate files
that you want to the locations specified in /usr/local/www/conf/httpd.conf
To do this, make a note of the results of the following commands (example results shown):
# ls -l /usr/local/www/conf/ssl.crt/
-r--------    1 root     root           68 Nov  5 00:33 snakeoil-dsa.crt
# ls -l /usr/local/www/conf/ssl.key/
-r--------    1 root     root           68 Nov  5 00:33 snakeoil-dsa.key

Given the results above, the following would be the correct lines for the httpd.conf file:
(Note: you shouldn't have to add theses lines, but you might have to modify the paths)

SSLCertificateFile /usr/local/www/conf/ssl.crt/snakeoil-dsa.crt
SSLCertificateKeyFile /usr/local/www/conf/ssl.key/snakeoil-dsa.key


The SSL version of Apache can now be started by the command "/usr/local/www/bin/apachectl startssl" and then typing in the passphrase for the SSL certificate.


If you can not start your apache server, try looking in the /usr/local/www/logs/error_log file to see if you can determine the problem.


