Related

.htaccess not working with CentOS Question Question
wordpress security Question Question

Question

Problem with SSL

Posted September 8, 2016 3.6k views
CentOSApache

I folllow this link to install SSL on my droplet (Centos 6.x):

https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-centos-6

And this… just for more references:

https://www.digitalocean.com/community/tutorials/how-to-create-an-ssl-certificate-on-apache-for-centos-7

When I type the URL of my site don´t open… shows me a message whit warnings and the chrome browser says: This page is insecure (broken HTTPS). The certificate for this site expires in 2017 or later, and the certificate chain contains a certificate signed using SHA-1.

Somebody can help me to solve this problem?… somebody has the same problem?

Add a comment
luisreyes430803
By:
luisreyes430803
Add a comment

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

×
4 answers
mnordhoff September 8, 2016

It’s 2016. SHA-1 is terrible. You need to pass -sha256 to the openssl req command to instead use SHA-256, which is still considered secure.

However, it would be even better to use a not-self-signed certificate. Let’s Encrypt provides free certificates and has easy-to-use (more or less) clients to install and maintain them.

Reply Report
luisreyes430803 September 8, 2016

Thanks for your answer, I execute this code:

openssl req -sha256 -nodes -days 365 -newkey rsa:2048 -keyout /etc/httpd/ssl/apache.key -out /etc/httpd/ssl/apache.crt

Now, the problem is wich my Apache server doesn´t run and the log´s file says:

SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error

Do you have any idea?

Reply Report
luisreyes430803 September 9, 2016

This is the solution to use HTTPS:

Using Let´s Encrypt my problems has been resolved easely… this link show how install the certiticate in some steps:

[https://digitz.org/blog/lets-encrypt-ssl-centos-7-setup/](http://)

Reply Report
tblhosting September 10, 2016

Let’s Encrypt gives you a free cert, does all the installing and managing for you. I would highly recommend using it.

Reply Report
Submit an Answer

Related

Looking for something else?

Ask a new question Search for more help