Debian Squeeze, Apache with gnu_tls, SNI, Serendipity, no-www

As Debian Squeeze does not include OpenSSL 1.0, we need gnu_tls to get SNI working with Apache2.

apt-get install libapache2-mod-gnutls
a2dismod ssl
a2enmod gnutls


The last line automatically adds
>IfModule mod_gnutls.c<
    Listen 443

to /etc/apache2/ports.conf so we don’t have to do that manually.

Generate the CertificateFile and the KeyFile (self signed):
  • Generate a Private Key
    openssl genrsa -des3 -out emp_server.key 1024
  • Generate a CSR (Certificate Signing Request)
    openssl req -new -key emp_server.key -out emp_server.csr
  • Remove Passphrase from Key
    cp emp_server.key emp_server.key.orig
    openssl rsa -in emp_server.key.orig -out emp_server.key
  • Generating a Self-Signed Certificate
    openssl x509 -req -days 1500 -in emp_server.csr -signkey emp_server.key -out emp_server.crt

Now add those files (and add permanent redirect from http to https) to the domain config in /etc/apache2/site-available/

<VirtualHost *:80>
    Redirect permanent /
<VirtualHost *:443>
    DocumentRoot /var/
    # Enable/Disable SSL for this virtual host.
    GnuTLSEnable on
    GnuTLSCertificateFile /etc/ssl/private/emp_server.crt
    GnuTLSKeyFile /etc//ssl/private/emp_server.key
    GnuTLSPriorities NORMAL


Don’t forget to open your Firewall on port 443 for SSL/TLS to work (and that’s TCP, not UDP ;).

To get Serendipity to redirect all request to (no-www) add the following to yur /var/ file:
# - Make your site Class B
RewriteCond %{HTTP_HOST} ^www\.(.+)$ [NC]
RewriteRule ^(.*)$ http://%1/$1 [R=301,L]


Restart Apache and you are done.


Tagged as: , , , , , | Author:
[Sonntag, 20120415, 18:31 | permanent link | 0 Kommentar(e)

Comments are closed for this story.


„Leyrers Online Pamphlet“ ist die persönliche Website von mir, Martin Leyrer. Die hier veröffentlichten Beiträge spiegeln meine Ideen, Interessen, meinen Humor und fallweise auch mein Leben wider.
The postings on this site are my own and do not represent the positions, strategies or opinions of any former, current or future employer of mine.


RSS Feed RSS Feed

Tag Cloud

2007, a-trust,, a1, accessability, acta, advent, age, amazon, ankündigung, apache, apple, audio, austria, backup, barcamp, bba, big brother awards, birthday, blog, blogging, book, books, browser, Browser_-_Firefox, buch, bürgerkarte, cars, cartoon, ccc, cfp, christmas, cloud, collection, computer, computing, concert, conference, copyright, database, date, datenschutz, debian, delicious, demokratie, design, desktop, deutsch, deutschland, dev, developer, digitalks, dilbert, disobay, dna, dns, Doctor Who, documentation, Domino, domino, Douglas Adams, download, drm, dsk, dvd, e-card, e-government, e-mail, e-voting, E71, Ein_Tag_im_Leben, email, eu, event, exchange, Extensions, fail, feedback, film, firefox, flightexpress, food, foto, fsfe, fun, future, games, gaming, geek, geld, gleichberechtigung, google, graz, grüne, grüninnen, hack, hacker, handtuch, handy, hardware, HHGTTG, history, how-to, howto, hp, html, humor, IBM, ibm, ical, image, innovation, intel, internet, internet explorer, iphone, ipod, isp, IT, it, java, javascript, job, journalismus, keyboard, knowledge, konzert, language, laptop, law, lego, lenovo, life, links, linux, Linux, linuxwochen, linuxwochenende, living, lol, london, lost+found, Lotus, lotus, Lotus Notes, lotus notes, LotusNotes, lotusnotes, lotusphere, Lotusphere, Lotusphere2006, lotusphere2007, Lotusphere2008, lotusphere2008, lustig, m3_bei_der_Arbeit, mac, mail, marketing, mathematik, media, medien, metalab, microsoft, Microsoft, mITtendrin, mobile, mood, movie, mp3, multimedia, music, musik, männer, nasa, netwatcher, network, netzpolitik, news, nokia, Notes, notes, Notes+Domino, office, online, OOXML, open source, openoffice, opensource, orf, orlando, os, outlook, patents, pc, pdf, perl, personal, php, picture, pictures, podcast, politics, politik, pr, press, presse, privacy, privatsphäre, productivity, programming, protest, qtalk, quintessenz, quote, quotes, radio, rant, recherche, recht, release, review, rezension, rss, science, search, security, server, sf, shaarli, Show-n-tell thursday, sicherheit, silverlight, SnTT, social media, software, sony, sound, space, spam, sprache, spö, ssh, ssl, standards, storage, story, stupid, summerspecial, sun, sysadmin, talk, technology, The Hitchhikers Guide to the Galaxy, theme, think, thinkpad, tip, tipp, tools, topgear, torrent, towel, Towel Day, TowelDay, travel, truth, tv, twitter, ubuntu, uk, unix, update, usa, vds, video, videoüberwachung, vienna, vim, Vim, vista, vorratsdatenspeicherung, vortrag, wahl, wcm, web, web 2.0, web2.0, web20, Web20, webdesign, werbung, wien, wiener linien, wikileaks, windows, windows 7, wired, wishlist, wissen, Wissen_ist_Macht, wlan, work, wow, wtf, Wunschzettel, wunschzettel, www, xbox, xml, xp, zensur, zukunft, zune, österreich, övp, übersetzung, überwachung

AFK Readinglist