Enabling https will allow for an encrypted connection between the user’s browsers and the server, meaning data passing back and forth cannot be intercepted by third parties. This is particularly useful for data collection and login processes.

1. Create a new directory and go there to work:

   mkdir /root/Certs ; cd $_

2. Create a CA key or import the EWEA CA key. If creating one from scratch, use:

   openssl genrsa -out ca.key 2048

3. Generate a Certificate Signing Request (CSR):

   openssl req -new -key ca.key -out ca.csr

4. Create a server key for the local machine:

   openssl x509 -req -days 3650 -in ca.csr -signkey ca.key -out <servername>.crt

5. Create the following folders if they don’t exist:

   mkdir -p /etc/httpd/ssl/certs /etc/httpd/ssl/private

6. Copy the keys to the following folders:

    cp -a <servername>.crt /etc/httpd/ssl/certs/ ; cp -a ca.* /etc/httpd/ssl/private/

7. Edit the apache config to use the new certificate:

   vi /etc/httpd/conf.d/ssl.conf

8. Find and edit these two lines:

   SSLCertificateFile /etc/httpd/ssl/certs/<servername>.crt
   SSLCertificateKeyFile /etc/httpd/ssl/private/ca.key

9. Make sure the firewall is open:

   vi /etc/sysconfig/iptables
   -A INPUT -p tcp -m tcp --dport 443   -m state --state NEW -j ACCEPT

10. Restart the firewall and Apache:

    service iptables restart && service httpd restart

11. Go to https://<servername> and see if it works!

More information here:

wiki.centos.org/HowTos/Https
www.digitalocean.com/community/articles/how-to-create-a-ssl-certificate-on-apache-for-centos-6

Multiple virtual hosts examples here:

http://www.digicert.com/ssl-support/apache-multiple-ssl-certificates-using-sni.htm

Recently I moved the EWEA blog from the sub-domain into the sub-directory of the EWEA website.

Before: http://blog.ewea.org/
After: http://www.ewea.org/blog/

To handle the redirect I put in the following into /etc/httpd/conf.d/vhosts.conf

<VirtualHost *:80>
# EWEA BLOG
ServerName blog.ewea.org
Redirect 301 / http://www.ewea.org/blog/
RedirectMatch 301 /(.+) http://www.ewea.org/blog/$1
ErrorLog  logs/blog.ewea.org-error_log
CustomLog logs/blog.ewea.org-access_log common
</VirtualHost>

The Redirect clause redirects all the traffic from the sub-domain to the sub-directory.
The RedirectMatch is to remap existing URLs to the sub-directory to avoid broken links.

(Taken from http://stackoverflow.com/questions/9397089/redirect-blog-mydomain-com)

Step by Step Guide to Installing on Centos 5.2 64bit
Last modified by kevin.connor on Mon, December 7, 2009 15:16
Source|Old Revisions

How to install Centos 5.2, PHP 5.2x, Mysql 5.1x and Magento 1.2.x Assuming that this is a server behind a firewall

Install Centos 5.2 (64bit) with correct IP settings and no packages selected except “base” restart and login

Update the system and download kernel headers in case they are needed for future software

yum update
yum install kernel*
reboot

Set the hosts file and disable ip6

nano /etc/hosts
Add IP and a hostname
nano /etc/modprobe.conf
Add 'alias ipv6 off'
Add 'net-pf-10 off'
Reboot

Disable un-needed services (look them up if you are interested)

chkconfig NetworkManager off
chkconfig NetworkManagerDispatcher off
chkconfig anacron off
chkconfig atd off
chkconfig bluetooth off
chkconfig cpuspeed off
chkconfig cups off
chkconfig gpm off
chkconfig hidd off
chkconfig ip6tables off
chkconfig iptables off
chkconfig irda off
chkconfig mdmonitor off
chkconfig mdmpd off
chkconfig pcscd off
chkconfig portmap off
chkconfig yum-updatesd off
chkconfig smartd off
service smartd stop
service NetworkManager stop
service NetworkManagerDispatcher stop
service anacron stop
service atd stop
service bluetooth stop
service cpuspeed stop
service cups stop
service gpm stop
service hidd stop
service ip6tables stop
service iptables stop
service irda stop
service mdmonitor stop
service mdmpd stop
service pcscd stop
service portmap stop
service yum-updatesd stop

Install Apache and OpenSSL

yum install httpd
yum install openssl
yum install httpd

Install the remi repositories for updated versions of PHP and MySQL not offered by Centos

wget http://download.fedora.redhat.com/pub/epel/5/i386/epel-release-5-3.noarch.rpm
wget http://rpms.famillecollet.com/el5.i386/remi-release-5-7.el5.remi.noarch.rpm
rpm -Uvh remi-release-5*.rpm epel-release-5*.rpm

Install php and required php extensions for Magento

yum --enablerepo=remi install php-common
yum --enablerepo=remi install php
yum install gd gd-devel
yum --enablerepo=remi install php-mcrypt php-xml php-xml php-devel php-imap php-soap php-mbstring php-mysql
yum --enablerepo=remi install php-mhash php-simplexml php-dom php-gd

(php-mhash extension no longer required as of php5.3(which is what you’ll get following these commands)-replaced by HASH Message Digest Framework in php core)

Install/Configure newest Mysql and Php extensions and enable in php.ini

yum --enablerepo=remi install mysql mysql-server
yum --enablerepo=remi install php-mysql php-pdo
nano /etc/php.ini
Add 'extension=pdo.so'
Add 'extension=pdo_mysql.so'
mysql_install_db
mysqladmin -u root password SOMEPASSWORD