Hi, I had an official signature from the root CA. Now how to generate the server.key and server.crt? What I did so far is using a self-signed certificate: file.pem was generated by keytool openssl req -new -x509 -key file.pem openssl genrsa -des3 -out server.key 2048 thanks, --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx