- Partially works, again, but still CSS issues.

INSTALL/INSTALL.FreeBSD.txt

@@ -63,7 +63,10 @@ sudo passwd misp
 sudo pkg install curl git python3 redis vim
 ```
 
-# LAMP
+# FAMP
+
+/!\ N.B: MariaDB 10.3 currently segfaults on 11.2: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229219
+
 ```
 sudo pkg install apache24 \
     logrotate \
@@ -181,6 +184,7 @@ sudo -u www sh -c "mysql -u misp -p misp < /usr/local/www/MISP/INSTALL/MYSQL.sql
 
 7/ Apache configuration
 -----------------------
+```
 # Now configure your Apache webserver with the DocumentRoot /usr/local/www/MISP/app/webroot/
 
 #2.4
@@ -199,13 +203,20 @@ sudo openssl req -newkey rsa:4096 -days 365 -nodes -x509 \
 -subj "/C=<Country>/ST=<State>/L=<Locality>/O=<Organization>/OU=<Organizational Unit Name>/CN=<QDN.here>/emailAddress=admin@<your.FQDN.here>" \
 -keyout /etc/ssl/private/misp.local.key -out /etc/ssl/private/misp.local.crt
 
-
-
+ chmod 750 /etc/ssl/private/
+ chmod 640 /etc/ssl/private/*
 
 # Otherwise, copy the SSLCertificateFile, SSLCertificateKeyFile, and SSLCertificateChainFile to /etc/ssl/private/. (Modify path and config to fit your environment)
 
-sudo mkdir /var/log/apache2/
+sudo mkdir /var/log/apache24/
+```
 
+Now edit: /usr/local/etc/apache24/sites-available/misp-ssl.conf to reflect the below.
+Make sure the ssl fqdn will reflect what you entered as a CN in the SSL-Cert.
+You might see this: "AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 127.0.0.1. Set the 'ServerName' directive globally to suppress this message"
+Edit: 
+
+```
 ============================================= Begin sample working SSL config for MISP
 <VirtualHost <IP, FQDN, or *>:80>
         ServerName <your.FQDN.here>
@@ -240,18 +251,24 @@ sudo mkdir /var/log/apache2/
         ServerSignature Off
 </VirtualHost>
 ============================================= End sample working SSL config for MISP
+```
 
+```
 # activate new vhost
 cd /usr/local/etc/apache24/sites-enabled/
-sudo ln -s ../sites-available/misp.conf
+sudo ln -s ../sites-available/misp-ssl.conf
 echo "Include etc/apache24/sites-enabled/*.conf" >> /usr/local/etc/apache24/httpd.conf
+echo "IncludeOptional etc/apache24/sites-enabled/*.conf" >> /usr/local/etc/apache24/httpd.conf
 
 sudo vi /usr/local/etc/apache24/httpd.conf
 /!\ Enable mod_rewrite in httpd.conf /!\
 LoadModule rewrite_module libexec/apache24/mod_rewrite.so
+LoadModule ssl_module libexec/apache24/mod_ssl.so
+Listen 443
 
 # Restart apache
 sudo service apache24 restart
+```
 
 8/ Log rotation
 ---------------