Tag: self signed ssl

  • self signed ssl

    To generate self signed SSL certificate, run

    openssl genrsa -out DOMAIN_NAME_HERE.key 2048
    openssl req -new -x509 -key DOMAIN_NAME_HERE.key -out DOMAIN_NAME_HERE.crt -days 3650 -subj /CN=DOMAIN_NAME_HERE

    Or

    openssl req -newkey rsa:2048 -nodes -keyout DOMAIN_NAME_HERE.key -x509 -days 3650 -out DOMAIN_NAME_HERE.crt

    Add Self Signed SSL to Apache Virtual Host

    Let’s say your Apache virtual host entry is

    <VirtualHost *:80>
        ServerName serverok.in
        ServerAlias www.serverok.in
        ServerAdmin [email protected]
        DocumentRoot /home/serverok.in/public_html
        <Directory "/home/serverok.in/public_html">
            Options All
            AllowOverride All
            Require all granted
            Order allow,deny
            allow from all
        </Directory>
    </VirtualHost>

    Create a new VirtualHost entry based on this, say yourdomain-ssl.conf, in this new file

    Find

    <VirtualHost *:80>

    Replace with

    <VirtualHost *:443>

    Find line starting with

    DocumentRoot

    Add Below

    SSLEngine on
    SSLCertificateFile /etc/ssl/yourdomain.crt
    SSLCertificateKeyFile /etc/ssl/yourdomain.key

    Now restart Apache

    systemctl restart apache2

    How to access the website using a Self-signed SSL certificate

    See SSL