Web Security and Commerce

Appendix B. Creating and Installing WebServer Certificates

This appendix describes how to install a web server, create a public/private key pair, and obtain a certificate for your web server. The process is described here in detail to give you a feel for how the mechanics of the process work. However, as it is likely that you will be performing this process with different software from that described here, you should refer to your own documentation before beginning the procedure.

To set up a cryptographically enabled web server, you must complete these steps:

1. Obtain a web server (either by downloading it over the Internet or by purchasing media or a computer containing the web server).

2. Install it.

3. Create a secret/public key pair for your web server.

4. Optionally create your own self-signed certificate so you can get your secure web server running immediately.

5. Send the public key to a certification authority (CA).

6. Send other, supporting documents to the certification authority.

7. Receive your signed X.509 v3 public certificate from the certification authority.

8. Install the certificate on your web server.

This appendix shows the process, using the Stronghold web server as a sample web server and VeriSign as a sample CA.

Downloading and Installing Your Web Server

On March 4th, 1996, Simson received the following electronic mail message:

Date: Mon, 4 Mar 1996 15:40:52 -0800 (PST) To: [e-mail] From: ApacheSSL Sales <[e-mail]> Subject: Do you need to provide your customers with SSL? ...