====== Certificats SSL ======
FIXME : en construction

  * [[wp>fr:Certificat_électronique]]
  * [[wp>fr:Transport_Layer_Security]]
  * PEM, [[wp>fr:X.509]], [[https://www.sslshopper.com/certificate-decoder.html]]
  * [[wp>fr:OpenSSL]]
  * Let's encrypt ?

===== Placement d'un certificat sur un serveur apache sous Linux (Ubuntu-server) =====
  * configuration de apache2 dans /etc/apache2/sites-available → fichier default-ssl.conf
  * répertoire (si fichier .pem) : /etc/apache2/ssl
    * ligne SSLCertificateFile /etc/apache2/ssl/server_and_domain_name.pem
  * commande pour afficher le certificat :
    * certificat crt : openssl x509 -in /etc/ssl/certs/server_and_domain_name.crt -text -noout
    * fichier .pem : penssl x509 -in /etc/apache2/ssl/server_and_domain_name.pem -text -noout
  * remplacement d'un fichier .pem (/etc/apache2/ssl/server_and_domain_name.pem) :
    * après obtention d'un fichier .pem, copie vers /home/useradmin/server_and_domain_name.pem
    * cd /etc/apache2/ssl
    * ls -la
    * sudo mv server_and_domain_name.pem server_and_domain_name.pem.old2022
    * sudo mv /home/usersadmin/server_and_domain_name.pem server_and_domain_name.pem
    * sudo chown root:root server_and_domain_name.pem
    * sudo service apache2 restart

<note warning>
Cas spécifiques : cf. [[intra:certificats_ssl]]
</note>

Références :
  * [[https://community.letsencrypt.org/t/difference-between-pem-and-crt-and-how-to-use-them/179161|Difference between .pem and .crt and how to use them - Help - Let’s Encrypt Community Support]]
  * [[https://www.suse.com/support/kb/doc/?id=000018152|How to create a .pem file for SSL Certificate Installations | Support | SUSE]]
  * [[https://www.digicert.com/kb/ssl-support/pem-ssl-creation.htm|How to Create a .pem File for SSL Certificate Installations]]
  * [[https://stackoverflow.com/questions/63195304/difference-between-pem-crt-key-files|ssl - Difference between pem, crt, key files - Stack Overflow]]