How to setup my SSL certificate ?

August 29, 2015 14k views
Apache LAMP Stack Ubuntu

I am trying to setup an SSL certificate on my droplet. However it is not working, and I don't know how to troubleshoot it for issues that I can then go and correct.

In /etc/apache2/ssl-certs i have my certificate, intermediate certificate and keyfile

In /etc/apache2/sites-available i have 2 files which were with the droplet on installation - 000-default.conf and default-ssl.conf.

I have followed instructions from https://www.digitalocean.com/community/tutorials/how-to-install-an-ssl-certificate-from-a-commercial-certificate-authority but when I try to go to my site under https nothing happens.

so.. how can i troubleshoot this to find any errors? do i need both of those original conf files or will 1 be enough? I have never setup SSL before and so am really stuck. Any help at all would be really appreciated.

Thanks.

4 Answers

DO tutorials are awesome. Google this "how to install certificate youroperatingsystem digitalocean"
startssl.com givesaway free SSL certificates. They all comply with modern requirements.

I have checked out many of the tutorials. Thanks for your replies. I am doing this for a client and I am now starting to think I have everything setup correctly,.. but it is the client who has not yet setup the relevant subdomain that I was asked to create the certificate for.

I have used this awesome tool https://www.sslshopper.com/ssl-checker.html
and checked :

https://my-ip-number - This shows that my certificates and intermediate certificates are setup correctly, the only issue is that the url and certificate common name are different.

https://myclient.subdomain.co.uk - This shows errors.

I used this tool:
https://pentest-tools.com/information-gathering/find-subdomains-of-domain

To scan all subdomains of my clients url and sure enough it showed that the sub-domain they requested I setup an SSL certificate for has not been created / point anywhere. So i'm pretty certain this is the issue. Both those tools above are very useful and will come in handy in the future im sure.

I have questions about how to install the certificate on my financing website here: http://simularfinanciamento.com/. Does anyone have a simple step-by-step how-to ?

Tks

Have another answer? Share your knowledge.