Change Email address of LetsEncrypt SSL
To change email address of LetsEncrypt SSL certficate account, run certbot update_account –email you@your-domain.com See LetsEncrypt
SSL
View SSL certficate Details
To view certificate details For the web server Or IMAP via SSL POP3 via SSL SMTP via SSL SMTP via TLS/StartTLS See SSL
Delete LetsEncrypt SSL certficate
To list all available LetsEncrypt SSL certificates, run To delete a certificate, run You can find NAME_OF_SSL_CERT from the command “certbot certificates”. See LetsEncrypt
Remove SSL private key password
To remove password from SSL private key, run openssl rsa -in PASSWORD_PROTECTED.key -out NO_PASSWORD.key This will ask for password. Once you enter password, key get saved with out password.
Convert SSL certificate into PFX format
To convert SSL certficiate into PFX format, run openssl pkcs12 -export -out certificate.pfx -inkey private-key.key -in certificate.crt -certfile ca-certificate.crt Example for SSL from namecheap/ssls openssl pkcs12 -export -out certificate.pfx -inkey serverok_in_key.txt -in serverok.in/serverok.in.crt -certfile serverok.in/serverok.in.ca-bundle
Purchase SSL
Here are some cheap SSL providers https://www.sslforfree.com/ https://zerossl.com https://www.ssls.com/ https://www.gogetssl.com https://www.namecheap.com/security/ssl-certificates/comodo/ See SSL
Nginx Proxy SSL Verification
When using Nginx as a reverse proxy, you may need to handle SSL verification requests. Passing this request to the backend server may not do any good as back-end servers usually only handle application requests. To handle SSL validation requests, use the following Nginx Configuration Now restart Nginx You can get SSL with the following … Read more
Create SSL pem file
To make .pem file from SSL certificate, run cat yourdomain.key yourdomain.crt yourdomain.ca-bundle > yourdomain.pem Here is the format —–BEGIN RSA PRIVATE KEY—– (Private Key: domain_name.key contents) —–END RSA PRIVATE KEY—– —–BEGIN CERTIFICATE—– (Primary SSL certificate: domain_name.crt contents) —–END CERTIFICATE—– —–BEGIN CERTIFICATE—– (Intermediate certificate: certChainCA.crt contents) —–END CERTIFICATE—- ssls/namecheap SSL example cat domain_com_key.txt domain.com/domain.com.crt domain.com/domain.com.ca-bundle > … Read more
Verify SSL Key matches with Private Key
To verify if SSL key match with the private Key, run following commands and compare resulting hash, it should match if SSL and Keys are matching. Verify Private Key openssl rsa -modulus -noout -in MY_DOMAIN.key | sha256sum Verify SSL openssl x509 -modulus -noout -in MY_DOMAIN.crt | sha256sum Verify CSR openssl req -modulus -noout -in MY_DOMAIN.csr … Read more
Amazon Linux Invalid command SSLEngine
On Amazon Linux, when restarting Apache server, i get error [root@ip-172-16-20-44 conf.d]# service httpd restart Stopping httpd: [ OK ] Starting httpd: AH00526: Syntax error on line 5 of /etc/httpd/conf.d/sendy.mayflower.com.my-le-ssl.conf: Invalid command ‘SSLEngine’, perhaps misspelled or defined by a module not included in the server configuration [FAILED] [root@ip-172-16-20-44 conf.d]# This is because SSL module was … Read more
Nginx Curl SSL error
After installing SSL on Nginx server, it worked on browser, but when i try access using curl command, i get error # curl https://serverok.in curl: (60) server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none More details here: http://curl.haxx.se/docs/sslcerts.html curl performs SSL certificate verification by default, using a “bundle” of Certificate Authority (CA) public keys (CA … Read more
SSL
SSL Install SSL Test SSL Settings SSL Windows Ca Bundle RapidSSL RSA CA 2018 Enable SSL on Applications Enable SSL on BitBucket Server Force SSL validation Comodo SSL https://secure.trust-provider.com/products/ORDERSTATUSCHECKER