Question

Problem with SSL

Posted September 8, 2016 3.4k views
CentOSApache

I folllow this link to install SSL on my droplet (Centos 6.x):

https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-centos-6

And this… just for more references:

https://www.digitalocean.com/community/tutorials/how-to-create-an-ssl-certificate-on-apache-for-centos-7

When I type the URL of my site don´t open… shows me a message whit warnings and the chrome browser says: This page is insecure (broken HTTPS). The certificate for this site expires in 2017 or later, and the certificate chain contains a certificate signed using SHA-1.

Somebody can help me to solve this problem?… somebody has the same problem?

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

×
4 answers

It’s 2016. SHA-1 is terrible. You need to pass -sha256 to the openssl req command to instead use SHA-256, which is still considered secure.

However, it would be even better to use a not-self-signed certificate. Let’s Encrypt provides free certificates and has easy-to-use (more or less) clients to install and maintain them.

Thanks for your answer, I execute this code:

openssl req -sha256 -nodes -days 365 -newkey rsa:2048 -keyout /etc/httpd/ssl/apache.key -out /etc/httpd/ssl/apache.crt

Now, the problem is wich my Apache server doesn´t run and the log´s file says:

SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error

Do you have any idea?

This is the solution to use HTTPS:

Using Let´s Encrypt my problems has been resolved easely… this link show how install the certiticate in some steps:

[https://digitz.org/blog/lets-encrypt-ssl-centos-7-setup/](http://)

Let’s Encrypt gives you a free cert, does all the installing and managing for you. I would highly recommend using it.

Submit an Answer