Lotts docs out there, some are better than others, but most are a bit confusing.
Just dropping this here for potential future need…
The 2 best I came across are:

1. http://www.akadia.com/services/ssh_test_certificate.html
2. http://www.tc.umn.edu/~brams006/selfsign_ubuntu.html/

I found that steps 1-4 in the first guide are easy to follow and will work well to generate your keys.
Then follow the second guide to enable SSL on your Apache and set things up.

For easier review:

Step 0: Install openssl using apt-get

Step 1: Generate a Private Key –

1

Step 2: Generate a CSR (Certificate Signing Request) –

1

When asked for Common Name – make sure to fill either public IP or full qualified domain name (sub.domain.com).

Step 3: Remove Passphrase from Key –

1

Step 4: Generating a Self-Signed Certificate –

1

Step 5: Copy the server.crt and server.key files into position –

1

Step 6: Enable ssl –

1

Step 7: Create a stub SSL conf. file (if needed) and establish a necessary symlink –

7.1 – If using an Ubuntu prior to ~10.04:

1

Then symlink to sites-enabled:

1

Step 8: Set up the SSL document root –

1

Step 9: Configure virtual hosts –

1

(Note: If using Ubuntu 10.04+ you may want to backup the original SSL conf also):

1

Now you need to declare the IP of your box (or FQDN/DNS name) and document roots you created in a previous step.

To configure HTTP over port 80 (edit /etc/apache2/sites-available/default) and add/replace (replace):

1

To configure HTTP over port 443 (edit /etc/apache2/sites-available/default) and add/replace (replace):

1

Step 10: Make sure  Apache listens to 443 –

Edit /etc/apache2/ports.conf and verify the following exist (or add it):

1

Step 11: Make sure the SSL engine is on –

Edit /etc/apache2/ports.conf and verify the following exist (or add it):

1

Step 12: restart apache –

Verify your changes are valid:

1

Restart Apache:

1

Done. you can browse to: https://yourdomain.com .

Obviously this will produce a warning on the browser side, since the certificate is self-signed. So if that’s important, make sure to purchase a signature from Verisign or simliar.

1