Install GoDaddy SSL Certificate on Apache

sysadmin/ssl-godaddy-apache.md

Apr 26, 2019

System Administration

You need 4 files:

Certificate Signig Request (CSR), example.com.csr
Private Key, example.com.key
SSL Certificate, example.com.crt (GoDaddy: 7dbXXXXXXXXfef89.crt)
Intermediate Certificate, example.com.crt or intermediate.crt or chainfile.crt (GoDaddy: gd_bundle-g2-g1.crt)

<VirtualHost 192.168.0.1:443>
        DocumentRoot /var/www/html2
        ServerName www.yourdomain.com
            SSLEngine on
            SSLCertificateFile /path/to/your_domain_name.crt
            SSLCertificateKeyFile /path/to/your_private.key
            SSLCertificateChainFile /path/to/DigiCertCA.crt
</VirtualHost>

CSR

Generate a CSR (Certificate Signing Request) Key. Don’t add a passphrase, if you do it’ll ask you for the passphrase everytime you restart Apache.

openssl req -newkey rsa:2048 -nodes -keyout example.com.key -out example.com.csr

-new used when creating a new CSR, rather than processing an existing one
-key the name of the file containing the key pair
-out name of the file to receive the CSR

You can use this CSR Decoder by GoDaddy to check your CSR

Generating a 2048 bit RSA private key
..............................+++
.................................+++
writing new private key to 'example.com.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:GB
State or Province Name (full name) [Some-State]:England
Locality Name (eg, city) []:London
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Example Ltd.
Organizational Unit Name (eg, section) []:IT
Common Name (e.g. server FQDN or YOUR name) []:example.com
Email Address []:info@example.com

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

Private Key (SSLCertificateKeyFile)

Private Key SSLCertificateKeyFile (.key file generated when you cerated the CSR)

SSL Certificate (SSLCertificateFile)

Intermediate Certificate (SSLCertificateChainFile)

Change/Remove the passphrase

openssl rsa -des3 -in myserver.key -out server.key.new
mv server.key.new myserver.key

Apache Conf file

# domain: example.com
# public: /var/www/example.com/public_html/
# logs: /var/www/example.com/logs/

<VirtualHost *:443>

  # Admin email, Server Name (domain name), and any aliases
  ServerAdmin webmaster@example.com
  ServerName example.com
  #ServerAlias www.example.com

  SSLEngine on
  SSLCertificateFile /etc/apache2/cert/example.com.crt
  SSLCertificateKeyFile /etc/apache2/cert/example.com.key
  SSLCertificateChainFile /etc/apache2/cert/example.com.chainfile.crt
  <IfVersion >= 2.4.8 >
    SSLCACertificateFile /etc/apache2/cert/example.com.chainfile.crt
  </IfVersion>

  # Index file and Document Root (where the public files are located)
  DirectoryIndex index.php index.html
  DocumentRoot /var/www/example.com/public_html

  # Allow .htaccess and Rewrites
  <Directory /var/www/example.com/public_html>
    Options FollowSymLinks
    AllowOverride All
  </Directory>

  # Log file locations
  LogLevel warn
  ErrorLog /var/www/example.com/logs/error.log
  CustomLog /var/www/example.com/logs/access.log combined

  # Custom php.ini path
  # PHPINIDir /var/www/example.com/public_html/
</VirtualHost>

<VirtualHost *:80>
  ServerName example.com

  # Redirect all HTTP to HTTPS
  Redirect permanent / https://example.com/
</VirtualHost>

Aamnah's Dev Notes

Sections

Most Used Tags