wiki:faq/security/setup-certificate

Version 13 (modified by Daniel Kahn Gillmor, 10 years ago) ( diff )

--

TranslatedPages

Configure your web site to use an x509 (aka SSL or https) certificate

Once you have obtained a security certificate from a certificate authority, you can start using by:

  1. Add a new https web config that includes the following:
    #SSL Stuff
    SSLEngine On
    SSLCertificateFile /path/to/certificate/file.crt
    SSLCertificateKeyFile /path/to/key/file.key
    SSLCertificateChainFile /path/to/key/intermediate.crt
    
  2. Don't forget to include the DocumentRoot related inscriptions to the new web config:
    DocumentRoot /home/members/name/sites/example.net/web
    CustomLog /home/members/name/sites/example.net/logs/web.log combined
    ErrorLog /home/members/name/sites/example.net/logs/error.log
    ScriptAlias /cgi-bin /home/members/name/sites/example.net/cgi-bin
    
  1. Add a * to the IP field of your web configuration. We use a method called Server Name Indication. Though if you would prefer your own IP address you may request it.

If you are replacing your key and certificate, you should already have a web config with this information - you will only need to change the path to the keys and certificates, replacing the paths to your old files with the path to your newly generated files.

Attachments (1)

Download all attachments as: .zip

Note: See TracWiki for help on using the wiki.