SSL Certification Installation on Linux

2021-12-01T07:03:46Z

223.187.6.101: Created page with " SSL Installation On linux SSL Installation has to be done on every website for security of the website.First we shou..."

SSL Installation On linux
SSL Installation has to be done on every website for security of the website.First we should login into server and then go to cd /etc/nginx/sites-available under this path we will host an website suppose there is an demowebsite.conf file. We should open that file in this file beside the server name there will be website name eg-demolinux.devopstraining.com.Now the website shows it was not secure because the https is not Enabled so we have to secure the website .
There will be one website certbot.eff.org in this webite we have to give webservice name and also operating system and we should run the below commands to install the packages.
For the first time SSL Installation we need to install packages.
Sudo snap install core; sudo snap refresh core
Sudo snap install --classic certbot
Now we have to create the soft links by using below commands
Sudo ln –s /snap/bin/certbot/ /usr/bin/certbot
Sudo certbot –Nginx.
If we use the above command automatically it will create the package and configure and redirects.If we use this command Sometimes it might Misconfigures.
After that commands it asks for Email-id so that for every 90 days it will send us notifications to Renewal the certificate.
It also shows the all domains configure in the particular server.So that time we should give the number of particular domain we want to Renewal SSL Certificate.
If still is not responding means sometimes it may due to not enabling HTTPS(443) Port so that in security group we should have to edit inbound Rules and we have to configure the port and then the website will Respond.
At the top we can see the security icon we can click on that and we can see the details of certificate and how much days it will be valid.
Now only for Renewal we should use the below command.It only generates the certificate.
Sudo certbot certonly –nginx
After giving the above command we should have to Enable Renew & Replace the certificate.Then it will provide two commands
/etc/letsencrypt/live/demolinux.devopstraining.xyz/fullchain.pem
/e tc/letsencrypt/live/demolinux.devopstraining.xyz/privkey.pem
Now we should copy above two commands and we should go to /etc/nginx/sites-available/vim .conf and in this file we should replace the two commands and then we should reload the Nginx and then the new renewal will be extended.

Main Page

2021-12-01T07:02:34Z

223.187.6.101:

<strong>Apoyar Wiki main page.</strong>

* [[Infrastructure|Apoyar Infrastructure]]
* [[Complete step-by-step guides]]
* [[Developer guides]]
* [[Tips & Tricks]]
* [[Miscellaneous Information]]
* [[Installing Updates on Hyper V servers]]
* [[Connecting RDP servers, if license expired and extending grace period via regedit]]
* [[Website Hosting & SSL certificate installation]]
* [[Email Configuration and Issues (Windows)]]
* [[Providing SSL Certificates to Web Sites ]]
* [[Generating a LetsEncrypt certificate - both Linux and Windows]]
* [[Low Free Disk Space Issues (Windows, Linux, UNIX) & Resolution]]
* [[Zeb Live DB Restore Task]]
* [[Creating an SFTP user for www server]]
* [[Adding hosts and services to Nagios - Windows hosts]]
* [[Adding hosts and services to Nagios - Linux/BSD hosts]]
* [[Upgrading from Windows 2008 R2 to 2016 - migrating MS SQL]]
* [[Upgrading major versions of Nginx,Mysql]]
* [[How to fix server authentication if it is broken( unable to login server)]]
* [[Snapshot restoration of VM's]]
* [[AWS CloudFront distributions Creation]]
* [[VPN configuration on organization level]]
* [[Fixing VM Issue from vcenter console with admin access in Clavister]]
* [[OS level checks on Nagios]]
* [[Certificate checks on Nagios]]
* [[SSL certificate CSR generation and merge as well create certificate key file]]
* [[Applying a generated certificate on web server]]
* [[What if Office 365 doesn't respond to Magento test emails]]
* [[Killing CPU 'hungry' processes on Zeb/PCR servers]]
* [[Auto Deployment from UAT to LIVE (dashboardsupportpod)]]
* [[Checking Failed Mails in Trend Micro]]
* [[Renewing Letsencrypt Certificate for Free BSD (nagios.apoyar)]]
* [[Upgrading Major Versions of PHP]]
* [[How to Make Dead RMG Back to Live (Scorpion)]]
* [[Disabling Expired Certificate on demo.apoyar]]
* [[How to Block 80 and 443 traffic for server]]
* [[AWS S3 Sync]]
* [[Checking System logs]]
* [[Root partition alerts]]
* [[SSL Certification Installation on Linux]]

Apoyar Wiki - User contributions [en-gb]

SSL Certification Installation on Linux

Main Page