{codecitation} openssl genrsa -des3 -out server.key 1024{/codecitation}

To create CSR type the following and give the details as requested.

{codecitation} openssl req -new -key server.key -out server.csr{/codecitation}

Now if you want to remove the passphrase, you can use the following. Disadvantage of keeping pass phrase is that whenever you restart apache it will ask for pass phrase to proceed and it blocks any automations to restart apache service. First of all create a backup of key as follows.

{codecitation} cp server.key server.key.org{/codecitation}

Then remove the pass phrase and save the output to server.key

{codecitation} openssl rsa -in server.key.org -out server.key{/codecitation}

Now you have two options either you can go to autorised site and get a certificate with this key and CSR. Otherwise you can generate self signed ssl as follows.

{codecitation} openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt{/codecitation}

Now we need to add this in the apache configuration as follows. Make sure that mod_ssl is installed. After that go to /etc/httpd/conf.d/ssl.conf and add the following at the bottom of the file

{codecitation}

<VirtualHost <ip>:443>

ServerName www.domain.com

DocumentRoot /var/www/html

SSLEngine on

SSLCertificateFile /etc/httpd/ssl/server.crt

SSLCertificateKeyFile /etc/httpd/ssl/server.key

SSLVerifyClient optional

</VirtualHost>

{/codecitation}