Problem with SSL

It’s 2016. SHA-1 is terrible. You need to pass -sha256 to the openssl req command to instead use SHA-256, which is still considered secure.

However, it would be even better to use a not-self-signed certificate. Let’s Encrypt provides free certificates and has easy-to-use (more or less) clients to install and maintain them.

Thanks for your answer, I execute this code:

openssl req -sha256 -nodes -days 365 -newkey rsa:2048 -keyout /etc/httpd/ssl/apache.key -out /etc/httpd/ssl/apache.crt

Now, the problem is wich my Apache server doesn´t run and the log´s file says:

SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error

Do you have any idea?

This is the solution to use HTTPS:

Using Let´s Encrypt my problems has been resolved easely… this link show how install the certiticate in some steps:

https://digitz.org/blog/lets-encrypt-ssl-centos-7-setup/