Difference between revisions of "Git, Apache and HTTPS with a free certificate"
Jump to navigation
Jump to search
| Line 1: | Line 1: | ||
==Prerequisites== | ==Prerequisites== | ||
* Ubuntu CLI understanding | |||
* Git knowledge | |||
* Ubuntu, this was tested using Ubuntu 16 | * Ubuntu, this was tested using Ubuntu 16 | ||
* Apache 2 | * Apache 2 | ||
Revision as of 21:26, 21 June 2017
Prerequisites
- Ubuntu CLI understanding
- Git knowledge
- Ubuntu, this was tested using Ubuntu 16
- Apache 2
Git using Apache
- Install Apache
sudo apt-get install apache2 apache2-utils
- Enable necessary modules
a2enmod cgi alias env
- (very useful) https://git-scm.com/book/en/v2/Git-on-the-Server-Smart-HTTP
- (useful with last) https://git-scm.com/docs/git-http-backend
More sites:
Self signed Certificate
How Certificates work
- https://www.youtube.com/watch?v=JCvPnwpWVUQ
- https://www.youtube.com/watch?v=iQsKdtjwtYI&t=423s
- https://www.youtube.com/watch?v=earzZpX-PiY&t=224s
- https://support.dnsimple.com/articles/what-is-ssl-certificate-chain/
- https://www.symantec.com/connect/blogs/types-ssl-certificates-choose-right-one
- (SSL file types) https://support.ssl.com/Knowledgebase/Article/View/19/0/der-vs-crt-vs-cer-vs-pem-certificates-and-how-to-convert-them
More info:
How to
How to create a Root Certificate authority and child certificates:
- (Very good) https://jamielinux.com/docs/openssl-certificate-authority/create-the-root-pair.html
- (nice) https://blog.didierstevens.com/2008/12/30/howto-make-your-own-cert-with-openssl/
- (video from above) https://www.youtube.com/watch?v=zwnEmLx2LRs
- https://datacenteroverlords.com/2012/03/01/creating-your-own-ssl-certificate-authority/
Other sites:
- (Basic steps, not too clear) https://devcenter.heroku.com/articles/ssl-certificate-self
- (Good but not everything useful) https://www.ibm.com/support/knowledgecenter/en/SSWHYP_4.0.0/com.ibm.apimgmt.cmc.doc/task_apionprem_gernerate_self_signed_openSSL.html
- https://www.digitalocean.com/community/tutorials/how-to-create-a-self-signed-ssl-certificate-for-apache-in-ubuntu-16-04
Adding the certificate to Apache
- https://www.youtube.com/watch?v=YR6-6XUC3sY
- https://www.youtube.com/watch?v=m06TttS2ZAM
- https://www.maketecheasier.com/apache-server-ssl-support/
- https://www.digicert.com/ssl-certificate-installation-apache.htm
Ensuring the right protocol:
- https://askubuntu.com/questions/643037/how-to-enable-tls-1-2-in-apache
- https://tecadmin.net/enable-tls-in-modssl-and-apache/
- https://serverfault.com/questions/314858/how-to-enable-tls-1-1-and-1-2-with-openssl-and-apache
Other links:
Configuring Git to use the self signed certificate
- https://stackoverflow.com/questions/11621768/how-can-i-make-git-accept-a-self-signed-certificate
- https://stackoverflow.com/questions/23807313/adding-self-signed-ssl-certificate-without-disabling-authority-signed-ones
More sites:
Client based authentication using certificates in Apache
Used links:
- http://wiki.cacert.org/ApacheServerClientCertificateAuthentication
- https://stackoverflow.com/a/24543642/1071459
- http://stuff-things.net/2015/09/28/configuring-apache-for-ssl-client-certificate-authentication/
Other links:
- http://pages.cs.wisc.edu/~zmiller/ca-howto/
- https://httpd.apache.org/docs/current/mod/mod_ssl.html#sslcacertificatefile