RE: How to install SSL certificate on a sub-domain
02-15-2018, 07:45 PM
(This post was last modified: 02-15-2018, 07:46 PM by duane.
Edit Reason: Smiles were displayed throughout text
)
You can follow this instructions at http://docs.sentora.org/?node=103
You will have to change the location of the certificate to where you have it located on your server.
I use WinSCP to browse through / edit files.
Steps:
Changing Sentora port:
On Sentora Panel go to Admin -> Module Admin -> Apache Config > Override a Virtualhost [Select VHost] ->
Tick Port Override.
Forward Port 80 to Overriden Port: 443
Custom Entry:
(Don't forget to replace domain.com with your domain's URL below:)
SSLEngine on
SSLProtocol ALL -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
SSLCertificateFile /etc/letsencrypt/live/domain.com/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/domain.com/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/domain.com/chain.pem
# Keeping bellow for future upgrades.
# Requires Apache >= 2.4
SSLCompression off
Save Vhost.
Wait on daemon update or run it manually and restart apache.
NOTICE: For CentOS replace apache2 with httpd
php -q /etc/sentora/panel/bin/daemon.php
service apache2 restart
Your domain should now be secured by SSL.
You can test it here: https://www.ssllabs.com/ssltest/
You will have to change the location of the certificate to where you have it located on your server.
I use WinSCP to browse through / edit files.
Steps:
Changing Sentora port:
On Sentora Panel go to Admin -> Module Admin -> Apache Config > Override a Virtualhost [Select VHost] ->
Tick Port Override.
Forward Port 80 to Overriden Port: 443
Custom Entry:
(Don't forget to replace domain.com with your domain's URL below:)
SSLEngine on
SSLProtocol ALL -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
SSLCertificateFile /etc/letsencrypt/live/domain.com/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/domain.com/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/domain.com/chain.pem
# Keeping bellow for future upgrades.
# Requires Apache >= 2.4
SSLCompression off
Save Vhost.
Wait on daemon update or run it manually and restart apache.
NOTICE: For CentOS replace apache2 with httpd
php -q /etc/sentora/panel/bin/daemon.php
service apache2 restart
Your domain should now be secured by SSL.
You can test it here: https://www.ssllabs.com/ssltest/