Apache+mod_SSL Configuration and theory

1. Authenticate the server to the client(is the server who it says it is RSA or KEA).
2. Allow the client and server to negotiate the cryptographic algorithms that they both support(128bit RC4 with MD5 for message authetication in most cases).
3. Authenticate the client to the server(optional RSA or KEA).
4. Use public-key encryption techniques (Diffie-Hellman kay agreement protocol) to generate a shared secret.
5. Establish the encrypted SSL connection.

  make certificate TYPE=custom

  Select RSA

  Enter your country code

  Enter State/county or province

  Enter a locality

  Enter your organization

  Enter the Unit/Group

  Common name

  Email address

  Enter the length of time the certificate should be valid (days)

  Select ssl3

  Enter a country code

  Enter a state

  Enter a Locality

  Enter an organization

  Enter your common name

  Enter your mail address

  Enter the length of time the certificate should be valid (days)

  Select certficate version 3

  Say Y encrypt the private key

  enter a password

  Say Y to encrypt private key

  Enter a password