Ubuntu: How To Create a SSL Certificate

[Diablo925]

How To Create a SSL Certificate

Enable SSL on you server

1: enable apache2 ssl

Code:

sudo a2enmod ssl
sudo service apache2 restart

Setup ssl on you server

2: make a folder to the crt and key files

Code:

sudo mkdir /var/zpanel/hostdata/name/ssl

change name with your username

3: Create a Self Signed SSL Certificate

Code:

sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /var/zpanel/hostdata/name/ssl/sitename.key -out /var/zpanel/hostdata/name/ssl/sitename.crt

output

Code:

Generating a 2048 bit RSA private key
.............+++
................+++
writing new private key to '/var/zpanel/hostdata/name/ssl/sitename.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----

follow this -->

Code:

Country Name (2 letter code) [AU]:US
State or Province Name (full name) [Some-State]:New York
Locality Name (eg, city) []:NYC
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Name of company
Organizational Unit Name (eg, section) []: just press enter
Common Name (e.g. server FQDN or YOUR name) []: website name example.com
Email Address []:Email

Setup SSL to website


4: now log on to you zpanel and go to

Code:

Module Admin --> Apache Config --> Override a Virtual Host Setting

and select domain

5: under Custom Entry:

enter

Code:

</VirtualHost>
<VirtualHost *:443>
ServerAdmin Email
ServerName websitename.tld
DocumentRoot /var/zpanel/hostdata/name/public_html/website
SSLEngine on
SSLCertificateFile /var/zpanel/hostdata/name/ssl/sitename.crt
SSLCertificateKeyFile /var/zpanel/hostdata/name/ssl/sitename.key

now wait to Daemon has run take about 5 min

now hXXps://sitename.tld Works

XX = tt

[j.waibel]

Add at least this to your SSL configuration to disable known broken things:

SSLProtocol -All +TLSv1 +TLSv1.1 +TLSv1.2
SSLCipherSuite ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM;
SSLHonorCipherOrder on

[Cantalupo]

is working?
Is asking for CSR...

[Cantalupo]

Product Name : RapidSSL Certificate
Enter Certificate Signing Request(CSR) Information

Paste your CSR in the form below. Please make sure that it contains the complete header and footer "BEGIN" and "END" lines exactly

[Cantalupo]

Got it, creating the CSR as follows:

Code:

mkdir /var/zpanel/hostdata/zadmin/ssl

Code:

cd /var/zpanel/hostdata/zadmin/ssl

Code:

openssl genrsa -des3 -out server.key 2048

Code:

openssl req -new -key server.key -out server.csr

[Me.B]

easier free SSL here:

https://www.startssl.com/