How to install SSL Certificate

All installation and configuration problems and questions

Moderators: gerski, enjay, williamconley, Op3r, Staydog, gardo, mflorell, MJCoate, mcargile, Kumba, Michael_N

How to install SSL Certificate

Postby iboam » Sun Mar 15, 2020 6:40 pm

i bought a ssl certificate and they gave me:
file.ca-bundle
file.crt
file.p7b
file.key

what is the proccess to install the certificate ??
ViciBox: 11 | VERSION: 2.14-897a BUILD: 230927-0857 | Clusters: 1 DB-WEB-ASTX | SSL | WebRTC | Wallboard | DNC Nightly Scrubber
iboam
 
Posts: 257
Joined: Mon Feb 08, 2016 2:35 pm

Re: How to install SSL Certificate

Postby iboam » Wed Mar 25, 2020 4:03 am

Free SSL Certificate (90 Days)

https://zerossl.com/free-ssl/

1- fill out your domain name and Accept ZeroSSL TOS and Accept Let's Encrypt SA (pdf) (System will generate the csr certificate
2- Include www-prefixed version too? Yes/ No (Your Choice)
3- Generating CSR -> Next
4- Generating Private Key -> Next
5- Download the file and upload to your server for verification (http://domain.com/.well-known/acme-challenge/) create a folder in root named .well-know and a subfolder named (acme-challenge)
6- Verify
7- Copy / Download certificate (rename to vicibox.crt)
8- Copy / Download domain key (rename to vicibox.key)
9- Upload files to dtlscertfile=/etc/apache2/ssl.crt/vicibox.crt and dtlsprivatekey=/etc/apache2/ssl.key/vicibox.key
10- service apache2 restart
11- vim /etc/apache2/vhosts.d/1111-default.conf
12- add this commands at the end before ends </virtualhost>


Code: Select all
RewriteEngine On
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]


service apache2 restart
ViciBox: 11 | VERSION: 2.14-897a BUILD: 230927-0857 | Clusters: 1 DB-WEB-ASTX | SSL | WebRTC | Wallboard | DNC Nightly Scrubber
iboam
 
Posts: 257
Joined: Mon Feb 08, 2016 2:35 pm

Re: How to install SSL Certificate

Postby williamconley » Thu Apr 02, 2020 11:33 am

iboam wrote:i bought a ssl certificate and they gave me:
file.ca-bundle
file.crt
file.p7b
file.key

what is the proccess to install the certificate ??

Unrelated to Vicidial, of course. But basically:

In /etc/apache2/vhosts.d/1111-default-ssl.conf (or whatever your version has for default-ssl.conf) you will find an example similar to:
Code: Select all
        SSLEngine on
        SSLCertificateFile /etc/apache2/ssl.crt/vicibox.crt
        #SSLCACertificateFile /etc/apache2/ssl.crt/CA_chain.crt
        SSLCertificateKeyFile /etc/apache2/ssl.key/vicibox.key


Make a quick copy of the file that's already there. End the copy with "BAK" (Or anything other than ".conf") and it will be ignored. Anything NOT ending in .conf in this directory is automatically ignored. Now you can edit the original.

You put your crt, ca-bundle, ane key files in the locations indicated by the provided examples (OR just put them anywhere on the HD, location isn't really important, there's no significance to "where they go" other than being able to find them easily).

As long as you put the full path in the .conf file based on where you put the file, apache will find them and use them.

No, it's not a problem that the file extentions don't match. The ".crt" ending in the commented out SSLCACertificateFile file is not required. So your "file.ca-bundle" doesn't need to be renamed. You can if you like, though. There's no rule about it's name or whether the name has been changed since it was created. You will need to uncommend the SSLCACertificateFile line to activate the loading of the CA bundle cert.

Then you restart the apache server.

Code: Select all
service apache2 restart


This is where that copy comes in. If there's an error, you can revert to the prior copy of the file, restart apache again, and it'll be up and running while you figure out what went wrong. But: If there IS an error, there will usually be a command provided to find out what the error was. If you provide us the output from that command (before reverting of course), we can help with any problems.
Vicidial Installation and Repair, plus Hosting and Colocation
Newest Product: Vicidial Agent Only Beep - Beta
http://www.PoundTeam.com # 352-269-0000 # +44(203) 769-2294
williamconley
 
Posts: 20018
Joined: Wed Oct 31, 2007 4:17 pm
Location: Davenport, FL (By Disney!)


Return to Support

Who is online

Users browsing this forum: No registered users and 78 guests