1. Install Python using your web installs
2. download the latest source from git
3. make NO_CURL=1 NO_MSGFMT=YesPlease NO_TCLTK=YesPlease prefix=/usr/local install
4. That should do it.

Task:

Configure my localhost & apache to allow for ssl.

Resources

• http://shiningthrough.co.uk/Setting-up-an-SSL-enabled-Apache-development-server-using-Phusion-Passenger-on-OS-X-Snow-Leopard
• http://www.modssl.org/
• http://www.entropy.ch/software/macosx/docs/mod_ssl.html

Solution:

• Go here: http://developer.apple.com/internet/serverside/modssl.html

• Note: when asked for “Common Name” when creating your certificate file, instead of using the 127.0.0.1 use the domain name
  you are going to use for development. ie: www.mysite.local

  # This is the Apache server configuration file providing SSL support.
  # It contains the configuration directives to instruct the server how to
  # serve pages over an https connection. For detailing information about these
  # directives see
  #
  # Do NOT simply read the instructions in here without understanding
  # what they do.  They're here only as hints or reminders.  If you are unsure
  # consult the online docs. You have been warned.
  
  # Pseudo Random Number Generator (PRNG):
  # Configure one or more sources to seed the PRNG of the SSL library.
  # The seed data should be of good random quality.
  # WARNING! On some platforms /dev/random blocks if not enough entropy
  # is available. This means you then cannot use the /dev/random device
  # because it would lead to very long connection times (as long as
  # it requires to make more entropy available). But usually those
  # platforms additionally provide a /dev/urandom device which doesn't
  # block. So, if available, use this one instead. Read the mod_ssl User
  # Manual for more details.
  #
  #SSLRandomSeed startup file:/dev/random  512
  #SSLRandomSeed startup file:/dev/urandom 512
  #SSLRandomSeed connect file:/dev/random  512
  #SSLRandomSeed connect file:/dev/urandom 512
  
  #
  # When we also provide SSL we have to listen to the
  # standard HTTP port (see above) and to the HTTPS port
  #
  # Note: Configurations that use IPv6 but not IPv4-mapped addresses need two
  #       Listen directives: "Listen [::]:443" and "Listen 0.0.0.0:443"
  #
  Listen 443
  NameVirtualHost *:443
  
  ##
  ##  SSL Global Context
  ##
  ##  All SSL configuration in this context applies both to
  ##  the main server and all SSL-enabled virtual hosts.
  ##
  
  #
  #   Some MIME-types for downloading Certificates and CRLs
  #
  AddType application/x-x509-ca-cert .crt
  AddType application/x-pkcs7-crl    .crl
  
  #   Pass Phrase Dialog:
  #   Configure the pass phrase gathering process.
  #   The filtering dialog program (`builtin' is a internal
  #   terminal dialog) has to provide the pass phrase on stdout.
  SSLPassPhraseDialog  builtin
  
  #   Inter-Process Session Cache:
  #   Configure the SSL Session Cache: First the mechanism
  #   to use and second the expiring timeout (in seconds).
  #SSLSessionCache         "dbm:/private/var/run/ssl_scache"
  SSLSessionCache        "shmcb:/private/var/run/ssl_scache(512000)"
  SSLSessionCacheTimeout  300
  
  #   Semaphore:
  #   Configure the path to the mutual exclusion semaphore the
  #   SSL engine uses internally for inter-process synchronization.
  SSLMutex  "file:/private/var/run/ssl_mutex"
  
  ##
  ## SSL Virtual Host Context
  ##
  ServerName www.mysite.local
  ServerAlias www.mysite.local
  #   General setup for the virtual host
  DocumentRoot "/Users/markevans/Sites/www.mysite.com"
  ServerAdmin mark@mysite.com
  
  ErrorLog "/Users/markevans/Sites/logs/www.mysite.com/error_log"
  CustomLog "/Users/markevans/Sites/logs/www.mysite.com/ssl_request_log" \
  "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
  SSLEngine on
  SSLProtocol all -SSLv2
  SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
  SSLCertificateFile /Users/markevans/Sites/sslcerts/www.mysite.com/server.crt
  SSLCertificateKeyFile /Users/markevans/Sites/sslcerts/www.mysite.com/server.key
  

• Handy Degbugging Command lines

• sudo apachectl configtest
• http -S