Friday, July 10, 2015

enable https (comodo cert) for apache2 & ubuntu 14

1, make xxxxxxxxxxxx.ca-bundle file

cat AddTrustExternalCARoot.crt COMODORSAAddTrustCA.crt COMODORSADomainValidationSecureServerCA.crt yourdomain_com.crt > yourdomain_com.ca-bundle

2, create cert folder under /etc/apache2/cert

3, copy all file from comodo to this folder

root@cnew:/etc/apache2/cert# ll
total 36
drwxr-xr-x 2 root root 4096 Jul 10 23:15 ./
drwxr-xr-x 9 root root 4096 Jul 10 21:34 ../
-rw-r--r-- 1 root root 1521 Jun 28 07:31 AddTrustExternalCARoot.crt
-rw-r--r-- 1 root root 7515 Jul 10 23:15 yourdomain_com.ca-bundle
-rw-r--r-- 1 root root 1891 Jun 28 07:31 yourdomain_com.crt
-rw-r--r-- 1 root root 1675 Jun 28 07:31 yourdomain.key
-rw-r--r-- 1 root root 1952 Jun 28 07:31 COMODORSAAddTrustCA.crt
-rw-r--r-- 1 root root 2151 Jun 28 07:31 COMODORSADomainValidationSecureServerCA.crt

4: vim /etc/apache2/sites-available/default-ssl.conf


                SSLCertificateFile  /etc/apache2/cert/yourdomain_com.crt
                SSLCertificateKeyFile /etc/apache2/cert/yourdomain_com.key

                SSLCertificateChainFile /etc/apache2/cert/yourdomain_com.ca-bundle

5:  enable ssl mod and ssl site
a2enmod ssl
a2ensite default-ssl.conf
service apache2 restart



No comments:

Post a Comment