GnuTLS VirtualHost with properly signed certificates

[Brenton Taylor]

Hello everyone,

I can't seem to find any good documentation on the internet that can explain how to use properly signed certificates with GnuTLS in my VirtualHost files.

Distro: Debian lenny
Apache/2.2.9
mod gnutls


This works good with a self signed certificate:

<VirtualHost *:443>
  GnuTLSEnable on
  ServerName www.brentontaylor.net.au
  GnuTLSPriorities NORMAL
  GnuTLSCertificateFile "/etc/ssl/certs/www.brentontaylor.net.au.crt"
  GnuTLSKeyFile "/etc/ssl/certs/www.brentontaylor.net.au.key"
  DocumentRoot "/var/www/store/it
</VirtualHost>

But I need to convert the following to work with GnuTLS

<VirtualHost *:443>
  SSLEngine On
  SSLProtocol all -SSLv2
  SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM
  SSLCertificateFile "/etc/ssl/certs/www.brentontaylor.com.au.crt"
  SSLCertificateKeyFile "/etc/ssl/certs/www.brentontaylor.com.au.no_enc.key"
  SSLCertificateChainFile "/etc/ssl/certs/www.brentontaylor.com.au.sub.class1.server.ca.pem"
  SSLCACertificateFile "/etc/ssl/certs/www.brentontaylor.com.au.ca.pem"
  SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
  ServerName www.brentontaylor.net.au
  DocumentRoot "/var/www/store/it
</VirtualHost>

Regards,
Brenton Taylor

PS: this is the second time I've used a mailing list :)

Send instant messages to your online friends http://au.messenger.yahoo.com