From rjpower@washington.edu Thu Apr 26 14:03:29 2001
Received: from mxu1.u.washington.edu (mxu1.u.washington.edu [140.142.32.8])
	by lists.u.washington.edu (8.11.2+UW01.01/8.11.2+UW01.03) with ESMTP id f3QL3L991442
	for <linux@lists.u.washington.edu>; Thu, 26 Apr 2001 14:03:21 -0700
Received: from sttlpop3.sttl.uswest.net (sttlpop3.sttl.uswest.net [206.81.192.3])
	by mxu1.u.washington.edu (8.11.2+UW01.01/8.11.2+UW01.04) with SMTP id f3QL3Lb26076
	for <linux@u.washington.edu>; Thu, 26 Apr 2001 14:03:21 -0700
Received: (qmail 26055 invoked by alias); 26 Apr 2001 21:02:53 -0000
Received: (qmail 23611 invoked by uid 0); 26 Apr 2001 21:02:07 -0000
Received: from dslppp-gw4-c145.sttl.uswest.net (HELO ns1) (216.160.109.145)
  by sttlpop3.sttl.uswest.net with SMTP; 26 Apr 2001 21:02:07 -0000
Message-ID: <002401c0ce93$f0f24ee0$0500000a@madbiker.net>
From: "Russell Power" <rjpower@washington.edu>
To: <linux@u.washington.edu>
References: <000101c0ce85$fc3e7de0$fe0aed18@anchorageak.net>
Subject: Re: Questions about security.
Date: Thu, 26 Apr 2001 14:00:36 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200

You need to download a SSL enabled mod to patch into Apache.  The one I
normally choose is modSSL.  It's free, and you can get it at www.modssl.org.
It has very detailed example instructions on how to setup everything to work
properly.  Essentially with the default installation you end up with a
virtual server listening on 443 which responds to SSL requests.  Any
information can be accessed through SSL just be using https instead of http
in your pages.

It also has some scripts to help you setup for creating certs or using your
own.


HTH,

--Russell


----- Original Message -----
From: "Mark Weisman" <mweisman@gci.net>
To: "UW Linux Group" <linux@u.washington.edu>
Sent: Thursday, April 26, 2001 12:20 PM
Subject: Questions about security.


> Hey all,
> I'm trying to get my secured server up and working. I've installed the
> OpenSSL and I already have Apache up and working. I'm not sure as to how I
> go about making a "secured directory" to put credit card gathering forms
> into or making my encryption key available for authentication. Any and all
> assistance would be greatly appreciated.
>
> Thanks,
> Mark
> www.infinitevisions.ws
>
>

.