152.57.20.93 at 03:23, 5 January 2021

2021-01-05T03:23:00Z

← Older revision		Revision as of 03:23, 5 January 2021
Line 1:		Line 1:
	SSL Certification for Websites		"SSL Certification for Websites"
	~~..............................~~

152.57.20.93 at 03:22, 5 January 2021

2021-01-05T03:22:38Z

← Older revision		Revision as of 03:22, 5 January 2021
Line 1:		Line 1:
	SSL Certification for Websites		SSL Certification for Websites
			..............................


	We have to follow this SSL certification for only “apoyar.eu” domain all sites		We have to follow this SSL certification for only “apoyar.eu” domain all sites
Line 63:		Line 65:

	Value – letsencrypt.org		Value – letsencrypt.org


	Note –		Note –

152.57.20.93: Created page with "SSL Certification for Websites We have to follow this SSL certification for only “apoyar.eu” domain all sites We have to install the certbot with following command only..."

2021-01-05T03:21:45Z

Created page with "SSL Certification for Websites We have to follow this SSL certification for only “apoyar.eu” domain all sites We have to install the certbot with following command only..."

New page

SSL Certification for Websites

We have to follow this SSL certification for only “apoyar.eu” domain all sites

We have to install the certbot with following command only

• certbot certonly –nginx

• For all websites we are securing should have only TLS 1.2 and 1.3

• We don’t have to use SSL and TLS 1.0 , 1.1

To know, nginx version and certification details we have, go to below path

• cd /etc/nginx

and, run below command

• nginx –V

To know what websites are running on server, go to below path

• cd /etc/nginx/sites-enabled/

and run below command

• grep -rnw '/etc/nginx/sites-available/' -e 'server_name'

For every SSL certification configuration, we have to follow below two redirection

• www --> non-www

• http --> https

for ex.
www.apoyar.eu  http://www.apoyar.eu  https://www.apoyar.eu  https://apoyar.eu

How to create DNS CAA record

• Go to go daddy

• Manage DNS

• Select domain and click on add

• Enter the details as per below

Name - @

Flags - 0

Tag – issue

Value – godaddy.com

If we have generated certificate from letsencrypt we can add CAA record for that with only changing value field with

Name - @

Flags – 0

Tag – issue

Value – letsencrypt.org

Note –

To check websites Security level and Certification details, Go to https://www.ssllabs.com/ssltest/ and enter website name (ex. apoyar.eu) and click submit, it will give you a summary of all security and certificates.

To determine which Certification authority (first column) has which DNS CAA string (second column) go to below link https://www.entrust.com/knowledgebase/ssl/certification-authority-authorization-caa-record-ca-values

SSL Certification for Websites - Revision history

152.57.20.93 at 03:23, 5 January 2021

152.57.20.93 at 03:22, 5 January 2021

152.57.20.93: Created page with "SSL Certification for Websites We have to follow this SSL certification for only “apoyar.eu” domain all sites We have to install the certbot with following command only..."