<?xml version="1.0"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en-GB">
	<id>https://wiki.apoyar.eu/index.php?action=history&amp;feed=atom&amp;title=Applying_a_generated_certificate_on_web_server</id>
	<title>Applying a generated certificate on web server - Revision history</title>
	<link rel="self" type="application/atom+xml" href="https://wiki.apoyar.eu/index.php?action=history&amp;feed=atom&amp;title=Applying_a_generated_certificate_on_web_server"/>
	<link rel="alternate" type="text/html" href="https://wiki.apoyar.eu/index.php?title=Applying_a_generated_certificate_on_web_server&amp;action=history"/>
	<updated>2026-07-20T13:44:26Z</updated>
	<subtitle>Revision history for this page on the wiki</subtitle>
	<generator>MediaWiki 1.41.0</generator>
	<entry>
		<id>https://wiki.apoyar.eu/index.php?title=Applying_a_generated_certificate_on_web_server&amp;diff=191&amp;oldid=prev</id>
		<title>Admin: Created page with &quot;Configuring Certificate for Renewal -----------------------------------   Login to nagios.apoyar   Copy b2b.bleckmann.com.key file to nagios from phobos.apoyar   •	scp neal@...&quot;</title>
		<link rel="alternate" type="text/html" href="https://wiki.apoyar.eu/index.php?title=Applying_a_generated_certificate_on_web_server&amp;diff=191&amp;oldid=prev"/>
		<updated>2021-06-30T11:26:16Z</updated>

		<summary type="html">&lt;p&gt;Created page with &amp;quot;Configuring Certificate for Renewal -----------------------------------   Login to nagios.apoyar   Copy b2b.bleckmann.com.key file to nagios from phobos.apoyar   •	scp neal@...&amp;quot;&lt;/p&gt;
&lt;p&gt;&lt;b&gt;New page&lt;/b&gt;&lt;/p&gt;&lt;div&gt;Configuring Certificate for Renewal&lt;br /&gt;
-----------------------------------&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Login to nagios.apoyar&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Copy b2b.bleckmann.com.key file to nagios from phobos.apoyar&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
•	scp neal@phobos:/home/neal/b2b.bleckmann.com.key   ./&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Note:- If getting error while copying, need to change permission of that file on phobos.apoyar&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
•	chmod 444 b2b.bleckmann.com.key&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
then copy same key file to returns server (bleckmann live)&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
•	scp b2b.bleckmann.com.key returns@10.208.192.174:/home/returns/&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
After this move crt file from returns server to nagios and then to phobos using below commands&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
•	scp returns@10.208.192.174:/home/returns/b2b.bleckmann.com.crt  ./&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
•	scp b2b.bleckmann.com.crt  neal@phobos:/home/neal/&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Login to phobos.apoyar&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Now, we have crt, csr and key at /home/neal/certs/  on phobos.apoyar&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Now go to &lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
•	cd /home/neal/certs/generated/bleckmann&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
move all three files here&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
•	mv /home/neal/certs/b2b.blecmann.com*  ./&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
and then remove  key file from nagios&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Now, login to returns server&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Compare crt and key file with below command&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
•	openssl x509 -noout -modulus -in b2b.bleckmann.com.crt | openssl md5 &amp;amp;&amp;amp; openssl rsa -noout -modulus -in b2b.bleckmann.com.key | openssl md5&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Now, move crt &amp;amp; key to below path&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
•	mv b2b.blecmann.com.crt /etc/ssl/certs/&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
•	mv b2b.blecmann.com.key /etc/ssl/private/&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Note:- If getting error while moving either crt or key, check for owner and permission and change if needed with below commands&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
•	chown root:root filename&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
•	chmod 400 filename&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Then go to &lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
•	Cd /etc/nginx/sites-available &lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Here, search for website configuration file with below command&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
•	grep –rmv ‘/etc/nginx/sites-available/’ –e ‘b2b.bleckmann.com’&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
then edit that conf file&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
•	vi b2b.conf&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
change crt and key file path in conf file&lt;br /&gt;
&lt;br /&gt;
save and exit file&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
•	:wq!&lt;br /&gt;
&lt;br /&gt;
 &lt;br /&gt;
Note:- Repeat above steps of editing .conf file, if we have multiple domains&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Then check for any errors with below command&lt;br /&gt;
&lt;br /&gt;
•	nginx –t&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
and then reload nginx (DON’T RESTART)&lt;br /&gt;
&lt;br /&gt;
•	systemctl  reload nginx&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
At last, browse websites and verify those padlocks and certificate information&lt;/div&gt;</summary>
		<author><name>Admin</name></author>
	</entry>
</feed>