установить SSL/TLS на AWS (Ubuntu 16 instance)

[mstdmstd]

Добрый день!
Хочу на AWS (Ubuntu 16 instance) установить SSL/TLS
В доке читаю :

Now that your instance is current, add SSL/TLS support by installing the
  Apache module mod_ssl:                           
  Copy[ec2-user ~]$ sudo yum install -y mod24_ssl

Пакета mod24_ssl нет
Нашел пакет libapache2-mod-nss - это он ?

Есть ли какие нюансы? можно ссылку на соответсвующее описание ?

Не силен я в админиcтрировании...

  Спасибо!

[Azure]

Ubuntu

yum install

Мне одному это кажется странным?

[mstdmstd]

Я запрашивал саппорт AWS и это цитата из доки по их ссылке
Я конечно выполнял

Код: [Выделить]

sudo apt-get install  mod24_sslс ошибкой что пакет не найден.
А как называется пакет?

[Azure]

Код: [Выделить]

apt search ssl -n

[mstdmstd]

И получил :

Код: [Выделить]

$ apt search ssl -n
Sorting... Done
Full Text Search... Done
aolserver4-nsopenssl/xenial 3.0beta26-5 amd64
  AOLserver 4 module: module for SSL mode

cl-plus-ssl/xenial 20151218-2 all
  Common Lisp interface to OpenSSL

courier-imap-ssl/xenial 4.10.0-20120615-1ubuntu7 amd64
  Courier mail server - IMAP over SSL

courier-mta-ssl/xenial 0.68.2-1ubuntu7 amd64
  Courier mail server - ESMTP over SSL

courier-pop-ssl/xenial 0.68.2-1ubuntu7 amd64
  Courier mail server - POP3 over SSL

courier-ssl/xenial 0.68.2-1ubuntu7 amd64
  Courier mail server - SSL/TLS Support

dcap-tunnel-ssl/xenial 2.47.10-1 amd64
  SSL tunnel for dCache

dlang-openssl/xenial 1.0.0e-1 all                                                                                                                                                                                 
  D version of the C headers for openssl                                                                                                                                                                         
                                                                                                                                                                                                                 
docbook-dsssl/xenial 1.79-9 all                                                                                                                                                                                   
  modular DocBook DSSSL stylesheets, for print and HTML                                                                                                                                                           
                                                                                                                                                                                                                 
docbook-dsssl-doc/xenial 1.79-6 all                                                                                                                                                                               
  documentation for the DocBook DSSSL stylesheets                                                                                                                                                                 
                                                                                                                                                                                                                 
erlang-ssl/xenial 1:18.3-dfsg-1ubuntu3 amd64                                                                                                                                                                     
  Erlang/OTP implementation of SSL                                                                                                                                                                               
                                                                                                                                                                                                                 
ftp-ssl/xenial 0.17.33+0.2-2 amd64
  FTP client with SSL or TLS encryption support

ftpd-ssl/xenial 0.17.35+0.3-2 amd64
  FTP server with SSL encryption support

gambas3-gb-openssl/xenial-updates 3.8.4-2ubuntu3.1 amd64
  Gambas OpenSSL component

jruby-openssl/xenial 0.9.11-2 all
  Ruby library that emulates the OpenSSL native library for JRuby

lcmaps-openssl-interface/xenial 1.6.1-2build1 all
  LCMAPS header files for OpenSSL interfaces

ldp-docbook-dsssl/xenial 0.0.20040321-3 all
  The Linux Documentation Project's DSSSL stylesheets

libace-inet-ssl-6.3.3/xenial 6.3.3+dfsg-1 amd64
  ACE SSL-enabled Inet protocol library

libace-inet-ssl-dev/xenial 6.3.3+dfsg-1 amd64
  ACE SSL-enabled Inet protocol library - development files

libace-ssl-6.3.3/xenial 6.3.3+dfsg-1 amd64
  ACE secure socket layer library

libace-ssl-dev/xenial 6.3.3+dfsg-1 amd64
  ACE secure socket layer library - development files

libapache-ssllookup-perl/xenial 2.00-04-1build1 amd64
  glue layer between Perl handlers and the mod_ssl public API

libapache2-mod-log-sql-ssl/xenial 1.100-16.2build1 amd64
  Use SQL to store/write your Apache queries logs - SSL extension

libcatalyst-actionrole-requiressl-perl/xenial 0.07-1 all
  Force an action to be (in)secure only

libcgi-application-plugin-requiressl-perl/xenial 0.04-2 all
  plugin enforcing that certain run modes must be SSL secured

libcrypt-openssl-bignum-perl/xenial 0.06-1build1 amd64
  Perl module to access OpenSSL multiprecision integer arithmetic libraries

libcrypt-openssl-dsa-perl/xenial 0.15-1build1 amd64
  module which implements the DSA signature verification system

libcrypt-openssl-pkcs10-perl/xenial 0.15-1build1 amd64
  Perl extension to OpenSSL's PKCS10 API

libcrypt-openssl-pkcs12-perl/xenial 0.7-1build1 amd64
  Perl extension to OpenSSL's PKCS12 API

libcrypt-openssl-random-perl/xenial 0.11-1build1 amd64
  module to access the OpenSSL pseudo-random number generator

libcrypt-openssl-rsa-perl/xenial 0.28-2build2 amd64
  module for RSA encryption using OpenSSL

libcrypt-openssl-x509-perl/xenial 1.8.6-1build1 amd64
  Perl extension to OpenSSL's X509 API

libcrypt-ssleay-perl/xenial 0.73.04-1build1 amd64
  OpenSSL support for LWP

libcurl4-openssl-dev/xenial-updates,xenial-security 7.47.0-1ubuntu2.2 amd64
  development files and documentation for libcurl (OpenSSL flavour)

libcyassl5/xenial 3.4.8+dfsg-1 amd64
  transitional dummy package with compatibility links

libengine-pkcs11-openssl/xenial 0.2.1-1 amd64
  OpenSSL engine for PKCS#11 modules

libevent-openssl-2.0-5/xenial-updates,xenial-security 2.0.21-stable-2ubuntu0.16.04.1 amd64
  Asynchronous event notification library (openssl)

libghc-hsopenssl-dev/xenial 0.11.1.1-2 amd64
  Partial OpenSSL binding for Haskell

libghc-hsopenssl-doc/xenial 0.11.1.1-2 all
  Partial OpenSSL binding for Haskell; documentation

libghc-hsopenssl-prof/xenial 0.11.1.1-2 amd64
  Partial OpenSSL binding for Haskell; profiling libraries

libghc-openssl-streams-dev/xenial 1.2.1.0-2build1 amd64
  OpenSSL network support for io-streams.

libghc-openssl-streams-doc/xenial 1.2.1.0-2build1 all
  OpenSSL network support for io-streams.; documentation

libghc-openssl-streams-prof/xenial 1.2.1.0-2build1 amd64
  OpenSSL network support for io-streams.; profiling libraries

libglobus-gsi-openssl-error-dbg/xenial 3.5-5 amd64
  Globus Toolkit - Globus OpenSSL Error Handling Debug Symbols

libglobus-gsi-openssl-error-dev/xenial 3.5-5 amd64
  Globus Toolkit - Globus OpenSSL Error Handling Development Files

libglobus-gsi-openssl-error-doc/xenial 3.5-5 all
  Globus Toolkit - Globus OpenSSL Error Handling Documentation Files

libglobus-gsi-openssl-error0/xenial 3.5-5 amd64
  Globus Toolkit - Globus OpenSSL Error Handling

libglobus-gsi-proxy-ssl-dbg/xenial 5.7-5 amd64
  Globus Toolkit - Globus GSI Proxy SSL Library Debug Symbols

libglobus-gsi-proxy-ssl-dev/xenial 5.7-5 amd64
  Globus Toolkit - Globus GSI Proxy SSL Library Development Files

libglobus-gsi-proxy-ssl-doc/xenial 5.7-5 all
  Globus Toolkit - Globus GSI Proxy SSL Library Documentation Files

libglobus-gsi-proxy-ssl1/xenial 5.7-5 amd64
  Globus Toolkit - Globus GSI Proxy SSL Library

libglobus-openssl-module-dbg/xenial 4.6-5 amd64
  Globus Toolkit - Globus OpenSSL Module Wrapper Debug Symbols

libglobus-openssl-module-dev/xenial 4.6-5 amd64
  Globus Toolkit - Globus OpenSSL Module Wrapper Development Files

libglobus-openssl-module-doc/xenial 4.6-5 all
  Globus Toolkit - Globus OpenSSL Module Wrapper Documentation Files

libglobus-openssl-module0/xenial 4.6-5 amd64
  Globus Toolkit - Globus OpenSSL Module Wrapper

libgnutls-openssl27/xenial-updates,xenial-security,now 3.4.10-4ubuntu1.3 amd64 [installed]
  GNU TLS library - OpenSSL wrapper

libhttp-daemon-ssl-perl/xenial 1.04-3 all
  A simple HTTP server class with SSL support

libicessl35v5/xenial 3.5.1-6.4ubuntu1 amd64
  Ice for C++ SSL plug-in

libio-socket-ssl-perl/xenial 2.024-1 all
  Perl module implementing object oriented interface to SSL sockets

libjglobus-ssl-proxies-java/xenial 2.1.0-3 all
  Globus Java - SSL and proxy certificate support

libjglobus-ssl-proxies-tomcat-java/xenial 2.1.0-3 all
  Globus Java - SSL and proxy certificate support for Tomcat

liblwt-ssl-ocaml/xenial 2.5.0+1-1 amd64
  cooperative OpenSSL bindings for OCaml (runtime)

liblwt-ssl-ocaml-dev/xenial 2.5.0+1-1 amd64
  cooperative OpenSSL bindings for OCaml

libnet-imap-simple-ssl-perl/xenial 1.3-3 all
  Subclass of Net::IMAP::Simple with SSL support

libnet-smtp-ssl-perl/xenial 1.03-1 all
  Perl module providing SSL support to Net::SMTP

libnet-ssleay-perl/xenial 1.72-1build1 amd64
  Perl module for Secure Sockets Layer (SSL)

libnet-sslglue-perl/xenial 1.055-1 all
  module to add/extend SSL support for common perl modules

libnot-yet-commons-ssl-java/xenial 0.3.15-1 all
  Not-yet-commons-SSL is a library to make SSL in Java easier

libnot-yet-commons-ssl-java-doc/xenial 0.3.15-1 all
  Documentation for Not-yet-commons-SSL

libnussl-dev/xenial 2.4.3-3.3build2 amd64
  The authenticating firewall [SSL development files]

libnussl1/xenial 2.4.3-3.3build2 amd64
  The authenticating firewall [SSL library]

libocamlnet-ssl-ocaml/xenial 4.0.4-1build3 amd64
  OCaml application-level Internet libraries - SSL runtime libraries

libocamlnet-ssl-ocaml-dev/xenial 4.0.4-1build3 amd64
  OCaml application-level Internet libraries - SSL development libraries

libpoconetssl9v5/xenial 1.3.6p1-5.1build1 amd64
  C++ Portable Components (POCO) Network library with SSL

libpoconetssl9v5-dbg/xenial 1.3.6p1-5.1build1 amd64
  C++ Portable Components (POCO) Network library with SSL (debug version)

libpoe-component-sslify-perl/xenial 1.012-1 all
  module for SSL connection handling in POE Components

libpoe-filter-ssl-perl/xenial 0.28-1build1 amd64
  module to make SSL in POE easy and flexible

libqca2-plugin-ossl/xenial 2.1.1-2ubuntu1 amd64
  transitional package for libqca2-plugins

libssl-dev/xenial-updates 1.0.2g-1ubuntu4.8 amd64
  Secure Sockets Layer toolkit - development files

libssl-doc/xenial-updates 1.0.2g-1ubuntu4.8 all
  Secure Sockets Layer toolkit - development documentation

libssl-ocaml/xenial 0.5.2-1 amd64
  OCaml bindings for OpenSSL (runtime)

libssl-ocaml-dev/xenial 0.5.2-1 amd64
  OCaml bindings for OpenSSL

libssl1.0.0/xenial-updates,now 1.0.2g-1ubuntu4.8 amd64 [installed]
  Secure Sockets Layer toolkit - shared libraries

libssl1.0.0-dbg/xenial-updates 1.0.2g-1ubuntu4.8 amd64
  Secure Sockets Layer toolkit - debug information

libsslcommon2/xenial 0.16-9ubuntu2 amd64
  enterprise messaging system - common SSL libraries

libsslcommon2-dev/xenial 0.16-9ubuntu2 amd64
  enterprise messaging system - common SSL development files

libwolfssl-dev/xenial 3.4.8+dfsg-1 amd64
  Development files for the WolfSSL encryption library

libwolfssl0/xenial 3.4.8+dfsg-1 amd64
  WolfSSL encryption library

libwolfssl0-dbg/xenial 3.4.8+dfsg-1 amd64
  Debug symbols for the WolfSSL encryption library

libxml-rsslite-perl/xenial 0.15+dfsg-2 all
  lightweight, "relaxed" RSS (and XML-ish) parser

libxmlsec1-openssl/xenial 1.2.20-2ubuntu4 amd64
  Openssl engine for the XML security library

openssl/xenial-updates,now 1.0.2g-1ubuntu4.8 amd64 [installed]
  Secure Sockets Layer toolkit - cryptographic utility

openssl-blacklist/xenial 0.5-3 all
  Blacklists for  OpenSSL RSA keys and tools

openssl-blacklist-extra/xenial 0.5-3 all
  Non-default blacklists of OpenSSL RSA keys

osslsigncode/xenial 1.7.1-1 amd64
  Authenticode signing tool

puppet-module-camptocamp-openssl/xenial 1.5.0-1 all
  Puppet module for managing openssl configuration

python-backports.ssl-match-hostname/xenial 3.4.0.2-1 all
  Backport of the Python 3.2 SSL hostname checking function

python-openssl/xenial 0.15.1-2build1 all
  Python 2 wrapper around the OpenSSL library

python-openssl-doc/xenial 0.15.1-2build1 all
  Python wrapper around the OpenSSL library (documentation package)

python-passlib/xenial 1.6.5-4 all
  comprehensive password hashing framework

python-wordpresslib/xenial 1.1-2 all
  Python module to connect to Wordpress blogs using XML-RPC protocol

python-zope.processlifetime/xenial 1.0-0ubuntu7 all
  Zope process lifetime events

python3-openssl/xenial 0.15.1-2build1 all
  Python 3 wrapper around the OpenSSL library

python3-passlib/xenial 1.6.5-4 all
  comprehensive password hashing framework

ruby-rack-ssl/xenial 1.4.1-2 all
  SSL/TLS extension for Ruby Rack

ssl-cert/xenial,now 1.0.37 all [installed,automatic]
  simple debconf wrapper for OpenSSL

ssl-cert-check/xenial 3.27-2 all
  proactively handling X.509 certificate expiration

ssldump/xenial 0.9b3-4.1ubuntu1 amd64
  An SSLv3/TLS network protocol analyzer

sslh/xenial 1.17-2 amd64
  Applicative protocol multiplexer

sslscan/xenial 1.8.2-2 amd64
  Fast SSL scanner

sslsniff/xenial 0.8-4.2build1 amd64
  SSL/TLS man-in-the-middle attack tool

sslsplit/xenial 0.4.11+dfsg-2 amd64
  transparent and scalable SSL/TLS interception

sslstrip/xenial 0.9-1 all
  SSL/TLS man-in-the-middle attack tool

strongswan-plugin-openssl/xenial-updates,xenial-security 5.3.5-1ubuntu3.3 all
  strongSwan plugin for OpenSSL

telnet-ssl/xenial 0.17.40+0.2-1 amd64
  telnet client with SSL encryption support

telnetd-ssl/xenial 0.17.40+0.2-1 amd64
  telnet server with SSL encryption support

testssl.sh/xenial 2.6+dfsg1-2 all
  Command line tool to check TLS/SSL ciphers, protocols and cryptographic flaws

Какой нужен?

[Azure]

Начните с

Код: [Выделить]

sudo apt install apache2-ssl-dev

[mstdmstd]

В списке пакетов выше такого пакета нет и получаю :

Код: [Выделить]

$ lsb_release -d; uname -r; uname -i
Description:    Ubuntu 16.04.3 LTS
4.4.0-1022-aws
x86_64
ubuntu@ip-172-31-5-104:~$ sudo apt install apache2-ssl-dev
Reading package lists... Done
Building dependency tree       
Reading state information... Done
E: Unable to locate package apache2-ssl-dev


[ReNzRv]

mstdmstd,
попробуй так:

Код: [Выделить]

apt-cache search apache | grep -i ssl

[Azure]

renzrv,

Код: [Выделить]

apt search "apache.*ssl.*"

[mstdmstd]

 И получил :

Код: [Выделить]

$ apt-cache search apache | grep -i ssl
libapache-ssllookup-perl - glue layer between Perl handlers and the mod_ssl public API
libapache2-mod-authn-webid - WebID FOAF+SSL authentication module for Apache
libapache2-mod-gnutls - Apache module for SSL and TLS encryption with GnuTLS
libapache2-mod-log-sql-ssl - Use SQL to store/write your Apache queries logs - SSL extension
libapache2-mod-nss - NSS-based SSL module for Apache2
libnot-yet-commons-ssl-java - Not-yet-commons-SSL is a library to make SSL in Java easier
libnot-yet-commons-ssl-java-doc - Documentation for Not-yet-commons-SSL
libsslcommon2 - enterprise messaging system - common SSL libraries
libsslcommon2-dev - enterprise messaging system - common SSL development files
libweb-id-perl - implementation of WebID (a.k.a. FOAF+SSL)
ubuntu@ip-172-31-5-104:~$ apt search "apache.*ssl.*"
Sorting... Done
Full Text Search... Done
activemq/xenial 5.13.2+dfsg-2 all
  Java message broker - server

libactivemq-java/xenial 5.13.2+dfsg-2 all
  Java message broker core libraries

libactivemq-java-doc/xenial 5.13.2+dfsg-2 all
  Java message broker core libraries - documentation

libapache-ssllookup-perl/xenial 2.00-04-1build1 amd64
  glue layer between Perl handlers and the mod_ssl public API

libapache2-mod-authn-webid/xenial 0~20110301-4 amd64
  WebID FOAF+SSL authentication module for Apache

libapache2-mod-gnutls/xenial 0.7.3-0ubuntu1 amd64
  Apache module for SSL and TLS encryption with GnuTLS

libapache2-mod-log-sql-ssl/xenial 1.100-16.2build1 amd64
  Use SQL to store/write your Apache queries logs - SSL extension

libapache2-mod-nss/xenial 1.0.12-2 amd64
  NSS-based SSL module for Apache2

libapache2-mod-php7.0/xenial-updates,now 7.0.18-0ubuntu0.16.04.1 amd64 [installed,automatic]
  server-side, HTML-embedded scripting language (Apache 2 module)

libconfig-find-perl/xenial 0.31-1 all
  module to search configuration files using OS dependent heuristics

libmina-java/xenial 1.1.7.dfsg-11 all
  Java network application framework

libmina-java-doc/xenial 1.1.7.dfsg-11 all
  Java network application framework - documentation

libmina2-java/xenial 2.0.9-2 all
  Java network application framework

libmina2-java-doc/xenial 2.0.9-2 all
  Java network application framework - documentation

libnetty-tcnative-java/xenial 1.1.33.Fork14-1 all
  Tomcat native fork for Netty

libnetty-tcnative-jni/xenial 1.1.33.Fork14-1 amd64
  Tomcat native fork for Netty (JNI library)

libnot-yet-commons-ssl-java-doc/xenial 0.3.15-1 all
  Documentation for Not-yet-commons-SSL

libpion-5.0/xenial 5.0.6+dfsg-1build1 amd64
  lightweight HTTP interface library - runtime files

libpion-5.0-dbg/xenial 5.0.6+dfsg-1build1 amd64
  lightweight HTTP interface library - debug files

libpion-common-4.0/xenial 4.0.7+dfsg-3.1ubuntu4 amd64
  lightweight HTTP interface library - common runtime files

libpion-common-4.0-dbg/xenial 4.0.7+dfsg-3.1ubuntu4 amd64
  lightweight HTTP interface library - common debug files

libpion-common-dev/xenial 4.0.7+dfsg-3.1ubuntu4 amd64
  lightweight HTTP interface library - common development files

libpion-dev/xenial 5.0.6+dfsg-1build1 amd64
  lightweight HTTP interface library - development files

libpion-doc/xenial 5.0.6+dfsg-1build1 all
  lightweight HTTP interface library - documentation

libpion-net-4.0/xenial 4.0.7+dfsg-3.1ubuntu4 amd64
  lightweight HTTP interface library - runtime files

libpion-net-4.0-dbg/xenial 4.0.7+dfsg-3.1ubuntu4 amd64
  lightweight HTTP interface library - debug files

libpion-net-dev/xenial 4.0.7+dfsg-3.1ubuntu4 amd64
  lightweight HTTP interface library - development files

libpion-net-doc/xenial 4.0.7+dfsg-3.1ubuntu4 all
  lightweight HTTP interface library - documentation

libpion-net-plugins/xenial 4.0.7+dfsg-3.1ubuntu4 amd64
  lightweight HTTP interface library - plugins

libpion-net-plugins-dbg/xenial 4.0.7+dfsg-3.1ubuntu4 amd64
  lightweight HTTP interface library - plugins debug files

libpion-plugins/xenial 5.0.6+dfsg-1build1 amd64
  lightweight HTTP interface library - plugins

libpion-plugins-dbg/xenial 5.0.6+dfsg-1build1 amd64
  lightweight HTTP interface library - plugins debug files

libsslcommon2/xenial 0.16-9ubuntu2 amd64
  enterprise messaging system - common SSL libraries

libsslcommon2-dev/xenial 0.16-9ubuntu2 amd64
  enterprise messaging system - common SSL development files

libtcnative-1/xenial 1.1.33-1 amd64
  Tomcat native library using the Apache Portable Runtime

libweb-id-perl/xenial 1.927-1 all
  implementation of WebID (a.k.a. FOAF+SSL)

nagios-plugins-contrib/xenial-updates 16.20151226ubuntu0.16.04.1 amd64
  Plugins for nagios compatible monitoring systems

php-solr/xenial 2.4.0-1 amd64
  PHP extension for communicating with Apache Solr server

php7.0-cgi/xenial-updates 7.0.18-0ubuntu0.16.04.1 amd64
  server-side, HTML-embedded scripting language (CGI binary)

php7.0-fpm/xenial-updates 7.0.18-0ubuntu0.16.04.1 amd64
  server-side, HTML-embedded scripting language (FPM-CGI binary)

pure-ftpd/xenial 1.0.36-3.2build1 amd64
  Secure and efficient FTP server

pure-ftpd-ldap/xenial 1.0.36-3.2build1 amd64
  Secure and efficient FTP server with LDAP user authentication

pure-ftpd-mysql/xenial 1.0.36-3.2build1 amd64
  Secure and efficient FTP server with MySQL user authentication

pure-ftpd-postgresql/xenial 1.0.36-3.2build1 amd64
  Secure and efficient FTP server with PostgreSQL user authentication

python-mod-pywebsocket/xenial 0.8-1 all
  WebSocket extension for Apache HTTP Server

radicale/xenial 1.1.1-1 all
  simple calendar and addressbook server - daemon
Похоже на libapache2-mod-nss ?

[ReNzRv]

Попробуй. или может libapache2-mod-gnutls.

[mstdmstd]

Спасибо libapache2-mod-gnutls установился...
Ткните плиз в соответсвующее описание всех настроек, желательно с учетом AWS...