====== How to enable SSL on solaris 10 ======

==== create a certificate or a certificate signing request ====

<code>
openssl req -new -nodes -newkey rsa:2048 -keyout foo.com.key -out foo.com.csr
</code>

check the settings

<code>
openssl req -text -noout -in  foo.com.csr
</code>

==== go to your favorite CA and let your certificate sign ====

for example from http://cacert.org

==== come back with a signed certificate ====

==== stop apache ====

<code>
svcadm disable apache2
</code>

==== enable SSL ====

<code>
svccfg -s apache2 setprop httpd/ssl = boolean: 'true'
</code>

==== configure apache for SSL ====

Solaris 10 ships with a functional ''/etc/apache2/ssl.conf'' file: edit the file and make sure the SSLCertificate* directive are pointing to your certificate and its key.

More or less you have to add
<code>
Listen 443
NameVirtualHost 443

<VirtualHost *:443>
    SSLEngine on
    SSLCertificateFile /etc/apache2/foo.com.cert
    SSLCertificateKeyFile /etc/apache2/foo.com.key

...
</code>

==== start apache ====

<code>
svcadm enable apache2
</code>

==== test your site ====

<code>
openssl s_client -connect foo.com:443 -state -debug
</code>

or 

https://www.ssllabs.com/ssltest/