Beruflich Dokumente
Kultur Dokumente
You need to already have apache server running on http port 80 (or whatever) and when you try to Fixed USB /dev/name for USB Micro Teleinfo device
go to your website for example http://demo.hallard.me (http://demo.hallard.me) you should have the (https://hallard.me/fixed-usb-dev-uteleinfo/) February
well know page 5, 2016
now we generate the certicates, for 3 years (1095 days) under the folder we created above.
RECEN T COM M EN T S
Shell
sudo openssl req -x509 -nodes -days 1095 -newkey rsa:2048 -out /etc/apache2/ssl/server.crt -keyout /etc/ap Le module PiTinfo V1.2 devient plus light –
Charles's Blog (https://hallard.me/pitinfov12-light/)
that will show the following, and ask you some questions.
on Réaliser une mise à jour sans fil (OTA) avec un
ESP8266 (https://hallard.me/esp8266-
ota/#comment-11548)
https://hallard.me/enable-ssl-for-apache-server-in-5-minutes/ 1/4
Generating a 2048 bit RSA private key
4/25/2019 Enable SSL for apache server in 5 minutes – Charles'sLeBlog
module PiTinfo V1.2 devient plus light –
............................................+++
.....................+++ Charles's Blog (https://hallard.me/pitinfov12-light/)
writing new private key to '/etc/apache2/ssl/server.key' on PiTInfo V1.2, en finir avec la téléinfo capricieuse
-----
You are about to be asked to enter information that will be incorporated (https://hallard.me/pitinfov12/#comment-11546)
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN. Ma Raspberry Pi MusicBox – jblab
There are quite a few fields but you can leave some blank (http://jblab.info/ma-raspberry-pi-musicbox/) on
For some fields there will be a default value,
Protect your Raspberry PI SD card, use Read-Only
If you enter '.', the field will be left blank.
----- filesystem (https://hallard.me/raspberry-pi-read-
Country Name (2 letter code) [AU]:FR only/#comment-11545)
State or Province Name (full name) [Some-State]:Poitou
Locality Name (eg, city) []:Montamise Récupérer les informations du compteur EDF en wifi
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Internet Self CA
Organizational Unit Name (eg, section) []:IT avec un ESP8266 – Jb's Blog
Common Name (e.g. server FQDN or YOUR name) []:demo.hallard.me (https://jbdesbas.wordpress.com/2017/02/25/recupere
Email Address []:mydummy@email.com
les-informations-du-compteur-edf-avec-un-esp8266/)
on PiTInfo V1.2, en finir avec la téléinfo capricieuse
The most important, is the Common Name, it should match the internet name FQDN (here
(https://hallard.me/pitinfov12/#comment-11542)
demo.hallard.me)
Now we install the SSL mod for apache, this instruction pre configure the file /etc/apache2/ports.conf
with some line and the important one that say Listen 443 CAT EGORIES
Shell Arduino (https://hallard.me/category/arduino/) (24)
sudo a2enmod ssl
ArduiPi (https://hallard.me/category/arduipi/) (15)
We put the default-ssl site available creating a symbolic link
Domotique (https://hallard.me/category/domotique/)
Shell (10)
sudo ln -s /etc/apache2/sites-available/default-ssl /etc/apache2/sites-enabled/000-default-ssl
Electronic (https://hallard.me/category/electronic/)
Now we edit the file default-ssl (or default-ssl.conf for new version) we have just enabled (25)
Edit October 2014 : on new apache2 version, configuration files need to have .conf extension, so in ESP8266 (https://hallard.me/category/esp8266/) (1)
this case the two previous commands are now :
IoT (https://hallard.me/category/iot/) (7)
Shell
Library (https://hallard.me/category/library-2/) (3)
sudo ln -s /etc/apache2/sites-available/default-ssl.conf /etc/apache2/sites-enabled/000-default-ssl.conf
and we change the two lines relative to SSLCertificate as follow : NRF24L01 (https://hallard.me/category/nrf24l01-2/)
(5)
/etc/apache2/sites-enabled/000-default-ssl
SSLCertificateFile /etc/apache2/ssl/server.crt Optware (https://hallard.me/category/optware/) (1)
SSLCertificateKeyFile /etc/apache2/ssl/server.key
Particle (https://hallard.me/category/particle/) (2)
Now restart apache server
Raspberry (https://hallard.me/category/raspberry/)
Shell (17)
sudo /etc/init.d/apache2 restart
RFM12 (https://hallard.me/category/rfm12/) (8)
now you can go with your favorite browser, in my example https://demo.hallard.me
RFM69 (https://hallard.me/category/rfm69/) (4)
(https://demo.hallard.me), the browser will warn you because it is a self signed certificate, but if you
accept it you will now have the same famous “It works!” but with encryption. To avoid warning by Sensors (https://hallard.me/category/sensors/) (6)
browser, you can add the certificate to Trusted Root Certificate Authority of your computer. The Synology (https://hallard.me/category/synology/) (3)
procedure to to this depends on browser and operating system, so google is your friend.
Téléinformation (https://hallard.me/category/tinfo/)
Now it is safe that you force SSL encryption on each page that require authentication. (11)
For example, for WordPress, add the following two lines (just after the other existing define lines in the Tutorial (https://hallard.me/category/tutorial/) (17)
You can do the same for phpmyadmin adding to the file /etc/phpmyadmin/config.inc.php
custom-php-sites/)">PHP with SSL</a>. But this doesn't include how to May 2012 (https://hallard.me/2012/05/) (1)
write redirect rules so your http php site is redirect to https urls. You can
April 2012 (https://hallard.me/2012/04/) (1)
write the redirect rules in .htacess.
June 2009 (https://hallard.me/2009/06/) (1)
Thanks for this great article. I got many ideas from this blog. You may
s://community.ch2i.eu/user/rubybenson)
get some more ideas here http://bit.ly/2Afdi6i (http://bit.ly/2Afdi6i)
M ETA
test123 commented 2 years ago
Log in (https://hallard.me/blog/wp-login.php)
@AfroViking (https://community.ch2i.eu/uid/238)
s://community.ch2i.eu/user/charles)
thanks for the head up, I will add these line for sure
https://hallard.me/enable-ssl-for-apache-server-in-5-minutes/ 4/4