I made a CMS (using PHP) that is basically drag and drop to be live (under linux/apache hosts), now I need the communications between the administrative/login pages of said CMS and the client (recent firefox/chrome) to be safe.
I wanted to use a basic auth system working under TLS. That would be great but the certificates usually have to be installed on the server which basically kills the portability aspect.
Is there a way to use TLS that doesn't involve having to install it in the server? If not, are there any alternatives to it that fit the requirements?
I concede that due to the constraints presented I may have to find alternatives to an encryption protocol to improve security in the above mentioned pages, like an authentication system that manages to build a secure connection after a clever "handshake".
What such systems do you know of that would respect the project constraints?
Keep in mind that I'm looking for something that was made and used, I have ideas of how I could make my own but I won't if I can avoid it, which would be ideal.