Create CSR using Openssl

a) cd /app/jaydev/jay/apache/
b) mkdir SHA2_CERTS; cd /app/jaydev/jay/apache/SHA2_CERTS
c) openssl genrsa -des3 -out jaydba_blogspot_com.key 2048 -sha256
d) save the password in .passwd.key
e) mv jaydba_blogspot_com.key jaydba_blogspot_com.key.orig

f)openssl rsa -in jaydba_blogspot_com.key.orig -out jaydba_blogspot_com.key

g)openssl req -sha256 -out jaydba_blogspot_com.csr -key jaydba_blogspot_com.key -new

Country Name (2 letter code) [GB]:US
State or Province Name (full name) [Berkshire]:California
Locality Name (eg, city) [Newbury]:XXXXXXX
Organization Name (eg, company) [My Company Ltd]:XXXXXXXX
Organizational Unit Name (eg, section) []:XXXXXXXXXXXX
Common Name (eg, your name or your server's hostname) []:jaydba.blogspot.com
Email Address []:srm.jay@gmail.com

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

To verify Contents of CSR:

h)openssl req -in jaydba_blogspot_com.csr -noout -text

                                [OR]

f) go to https://www.trustico.com/ssltools/decode/csr-pem/decode-csr.php

How To Build Apache with local openssl

INSTALL OPENSSL IN CUSTOM LOCATION:

a) mkdir -p /app/webauth_test/jaydev & Copy software folder from raappdev21:/app/webauth_test/jaydev
b) cd /app/webauth_test/jaydev/software/openssl-1.0.1
c) rm -rf openssl-1.0.1s
D) tar -zxvf openssl-1.0.1s.tar.gz
e) cd  /app/webauth_test/jaydev
f) mkdir -p openssl   openssl-1.0.1s_install
g) cd /app/webauth_test/jaydev/software/openssl-1.0.1/openssl-1.0.1s
h)./config --prefix=/app/webauth_test/jaydev/openssl --openssldir=/app/webauth_test/jaydev/openssl-1.0.1s_install shared
i)make depend
j)make test
k)make install
l)Add the below to end of .profile
export PATH=/app/webauth_test/jaydev/openssl/bin:$PATH
export LD_LIBRARY_PATH=/app/webauth_test/jaydev/openssl/lib:$LD_LIBRARY_PATH



APACHE SETUP:

a)cd /app/webauth_test/jaydev/software/Apache
b)tar -xvf httpd-2.2.31.tar
c)mkdir -p /app/webauth_test/jaydev/apache-2.2.31
d)cd /app/webauth_test/jaydev/software/Apache/httpd-2.2.31
e)vi config.nice
"./configure" \
"--prefix=/app/webauth_test/jaydev/apache-2.2.31" \
"--with-ssl=/app/webauth_test/jaydev/openssl" \
"--enable-mods-shared=most" \
"--enable-proxy" \
"--enable-module=ssl" \
"--enable-ssl" \
"--enable-module=so" \
"--with-apxs=/usr/sbin/apxs" \
"--with-included-apr" \
"$@"
f)./config.nice
g)make
h)make install
i)Copy jay.conf,ssl.conf,ldap.conf,webauth.conf from current webauth to /app/webauth_test/jaydev/apache-2.2.31/conf and add below parameter to core-facilities.conf

  SSLProtocol -ALL +TLSv1.2 +TLSv1.1 +TLSv1
  SSLCipherSuite HIGH:MEDIUM:!MD5:!RC4
  SSLHonorCipherOrder On



j)Copy the certs directory from current webauth to /app/webauth_test/jaydev/apache-2.2.31
k)Do the path change for certs and webauth key files,but don't change other paths(Ruby,passenger paths).
l) Include the files to httpd.conf
m)Stop the old apache and bring up this new apache.
n)Then go to old apache home and do below steps.

cd /app/jaydev1/webauth/bin
mv apachectl.sh apachectl.sh.do.not.start
vi apachectl.sh and add belwo lines

echo -e  "\nCurrently Apache is running on /app/webauth_test/jaydev/apache-2.2.31/"
echo -e  "\nPlease refer SFI-494 for more details\n"
echo -e "In case if you want to revert back ,Please follow below steps\n\n"
echo -e "\ncd /app/webauth_test/jaydev/apache-2.2.31/"
echo -e "\n ./apachectl stop "
echo -e "\ncd /app/jaydev1/webauth/bin"
echo -e "\nmv  apachectl.sh apachectl.sh.dnu;mv apachectl.sh.do.not.start  apachectl.sh"
echo -e "\n./apachectl.sh  start"