How do I go about setting up HTTPS for my site's log-in page?
Rails 2.3.11
I'm not really sure how to start. I found this here on SO, but the only response didn't elaborate on setting up Ap开发者_开发知识库ache.
My site's hosted with BlueHost, fyiy.
I assume you have SSH access with this solution.
Login via ssh
Generate 2048 bit private key
$>openssl genrsa -out host.key 2048
Generate signing request
$>openssl req -new -nodes -key host.key -out host.csr
Above command will ask you a bunch of questions. Your input needs to match the domain registration values.
Submit contents of host.csr value to SSL provider.
$>cat host.csr
You should get back a ".crt" file from the SSL provider. You need to point your sites virtual host at the private key and certificate file/.
<VirtualHost *:443>
SSLEngine on
SSLCertificateFile /etc/httpd/conf/ssl.crt/host.crt
SSLCertificateKeyFile /etc/httpd/conf/ssl.key/host.key
SSLProtocol All -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT56:+HIGH:+MEDIUM:!SSLv2:!RC4:+EXP
</VirtualHost>
精彩评论