Tech Corner

HOW TO INSTALL AN SSL CERTIFICATE ON CENTOS?

22 Feb, 2022
image

We always cares about Security let’s discuss How to install an SSL certificate on CentOS? A trusted 1/3 birthday celebration known as a Certificate Authority (CA) problems the three varieties of virtual certificates: Domain Validation (DV), Organization Validation (OV), and Extended Validation (EV). The CA ensures the digital certificate’s authenticity with a virtual signature so that quit users (or their software program) can accept as true that the server is actually the website it purports to be. Not sure which virtual certificates are satisfactory? More…


How to install an SSL certificate on CentOS?

Installing SSL digital certificates for the Apache HTTPd won’t bust the brain. However, in case you hit an obstacle on CentOS or Fedora even as running through the subsequent steps, drop me a line inside the remarks phase at the lowest of this put up.


1. Log in to the server as root using SSH.



2. Check the OpenSSL client software.


Make sure the OpenSSL client software needed for a secure website is in place with:

# yum install mod_ssl openssl

This will either install OpenSSL or inform you that it’s already present.

3. Make a directory to store the server key and certificate.


# mkdir /etc/httpd/ssl

4. Copy the SSL certificate file and server key to the new directory.


5. Edit the ssl.conf or httpd.conf file. Below is an example using the vi text processor.


# vi /etc/httpd/conf.d/ssl.conf

Once open, edit the file so that it points to the correct files in the web server. It will look something like this:

DocumentRoot /var/www/html2
						ServerName www.your_very_own_domain.com
						SSLEngine on
						SSLCertificateFile /path/to/your_very_own_domain.crt
						SSLCertificateKeyFile /path/to/your_private.key
						SSLCertificateChainFile /path/to/DigiCertCA.crt

Be sure to uncomment any of the above lines, and use the correct details for the website.

SSLCertificateChainFile instead of SSLCertificateKeyFile.

6. Check to ensure the Apache configuration files does not contain any errors.


# apachectl configtest

7. Restart the Apache server.


Use the following command to restart the Web server:

# /etc/init.d/httpd restart