- What is SSL?
- SSL Certificate Features
- Ordering A Certificate
- Certificate Installation
- SSL Certificate Errors
- SSL Details
- Special Types
Most Popular
- The Most Common OpenSSL Commands
- Stop the "page contains secure and nonsecure items" warning
- How To Configure SSL Host Headers in IIS 6
- Firefox 3 developer explains "broken" SSL error pages
- Installing an SSL Certificate in Windows Server 2008 (IIS 7.0)
Apache Server SSL Installation Instructions
- Save the primary and intermediate certificates to a folder on the server with the private key.
- Open the Apache configuration file in a text editor. Apache configuration files are usually found in /etc/httpd. The main configuration file is usually named httpd.conf. In most cases the <VirtualHost> blocks will be at the bottom of this httpd.conf file. Sometimes you will find the <VirtualHost> blocks in a separate file in a directory like /etc/httpd/vhosts.d/ or /etc/httpd/sites/ or in a file called ssl.conf.
- If you need your site to be accessible through both secure (https) and non-secure (http) connections, you will need a virtual host for each type of connection. Make a copy of the existing non-secure virtual host and change the port from port 80 to 443.
- Add the lines in bold below.
<VirtualHost 192.168.0.1:443>
DocumentRoot /var/www/website
ServerName www.domain.com
SSLEngine on
SSLCertificateFile /etc/ssl/crt/primary.crt
SSLCertificateKeyFile /etc/ssl/crt/private.key
SSLCertificateChainFile /etc/ssl/crt/intermediate.crt
</VirtualHost> - Change the names of the files and paths to match your certificate files:
- SSLCertificateFile should be your primary certificate file for your domain name.
- SSLCertificateKeyFile should be the key file generated when you created the CSR.
- SSLCertificateChainFile should be the DigiCert intermediate certificate file (DigiCertCA.crt)
- Save the changes and exit the text editor.
- Restart your Apache web server using one of the following commands:
/usr/local/apache/bin/apachectl startssl
/usr/local/apache/bin/apachectl restart

Write a comment