Related

.htaccess not working with CentOS Question Question
wordpress security Question Question

Question

Problem with SSL

Posted September 8, 2016 3.9k views
CentOSApache

I folllow this link to install SSL on my droplet (Centos 6.x):

https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-centos-6

And this… just for more references:

https://www.digitalocean.com/community/tutorials/how-to-create-an-ssl-certificate-on-apache-for-centos-7

When I type the URL of my site don´t open… shows me a message whit warnings and the chrome browser says: This page is insecure (broken HTTPS). The certificate for this site expires in 2017 or later, and the certificate chain contains a certificate signed using SHA-1.

Somebody can help me to solve this problem?… somebody has the same problem?

Add a comment
luisreyes430803
By:
luisreyes430803

Related

.htaccess not working with CentOS Question Question
wordpress security Question Question

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

×
4 answers
mnordhoff September 8, 2016

It’s 2016. SHA-1 is terrible. You need to pass -sha256 to the openssl req command to instead use SHA-256, which is still considered secure.

However, it would be even better to use a not-self-signed certificate. Let’s Encrypt provides free certificates and has easy-to-use (more or less) clients to install and maintain them.

Reply Report
luisreyes430803 September 8, 2016

Thanks for your answer, I execute this code:

openssl req -sha256 -nodes -days 365 -newkey rsa:2048 -keyout /etc/httpd/ssl/apache.key -out /etc/httpd/ssl/apache.crt

Now, the problem is wich my Apache server doesn´t run and the log´s file says:

SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error

Do you have any idea?

Reply Report
luisreyes430803 September 9, 2016

This is the solution to use HTTPS:

Using Let´s Encrypt my problems has been resolved easely… this link show how install the certiticate in some steps:

[https://digitz.org/blog/lets-encrypt-ssl-centos-7-setup/](http://)

Reply Report
tblhosting September 10, 2016

Let’s Encrypt gives you a free cert, does all the installing and managing for you. I would highly recommend using it.

Reply Report
Submit an Answer

Related

Looking for something else?

Ask a new question Search for more help