mostly for administrative purposes i enabled SSL for www.prueter.ch now (i don’t like people to see my wordpress password in cleartext via WLAN ;)).

just as a short instruction for everybody who wants to generate the SSL server-cert with windows certificate services and wants to use them with Apache running on Linux:

• create server-cert keypair on linux-machine:
  openssl genrsa -out serverKey.pem -rand file1:file2:… 1024
• create certificate request on linux-machine:
openssl req -new -inkey serverKey.pem -out severReq.pem
• process request on your windows CA and save SSL-server cert as base64 encoded version
• copy SSL-server cert to your linux machine
• convert it into PEM format:
openssl x509 -in serverCert.cer -outform PEM -out serverCert.pem
• copy your CA cert (base64 encoded) to your linux machine
• convert it into PEM format:
  openssl x509 -in CACert.cer -outform PEM -out CACert.pem
• rename serveryKey.pem to serverCert.key and copy it to to $(APACHE)/ssl.key dir
• rename serverCert.pem to serverCert.crt and copy it to to $(APACHE)/ssl.crt dir
• rename CACert.pem to CACert.crt and copy it to to $(APACHE)/ssl.crt dir
• execute make in $(APACHE)/ssl.crt
• now the certificates are correctly installed and can be referred to in your apache config (e.g. in your vhost file)