How To Install SSL Certificate on Apache for CentOS

Hello friends, in this tutorial today you will learn how to install ssl certificate in your live Web Application . To install ssl in this tutorial, you need to have a custom domain and a hosting server. I am using dedicated web hosting in this tutorial. and using wiscp (file transfer between a local and a remote computer) for file transfer. And for the remote terminal I am using Maxterm(ultimate toolbox for remote computing).

Bitnami Server Install Centos

Do you want to see a video of this tutorial CLICK ME

So you have to open to MobaXtrem now. and click on session button who is left top . and click on SSH button now you can put your hostname in Remote host and put your Port and click on OK button. ( in most of cases port is 22)

Now you have to login in which the user should be root and the password of the root itself.

Note: This password will not show when you are typing the password, so to give your correct password, and you just have to click the Enter button.

Now you are logged in successfully.

Generate a CSR (Certificate Signing Request)

Now you have to move to conf directory

 cd /opt/lampstack/apache2/conf/

In this directory, the CSR file is generated, for that see the code below, you have to give your custom domain in place of the domain name.

openssl req -nodes -newkey rsa:2048 -keyout (domain-name).key -out (domain-name).csr

The (domain-name) should be matched with Your Domain name.

Example:

openssl req -nodes -newkey rsa:2048 -keyout example_com.key -out example_com.csr

After that you have to give two letter code of your country name then state and then state name.

Look at the image below you will be clear castextech.com
My domain name is here, there are two important things, one is to give you your full domain in the server name and in the email from where you bought the ssl, you will have to give the email that you gave

After that you have to provide a simple password and after that your CSR file will be created in the /opt/lampstack/apache2/conf/ directory.

Now you have to open the csr file and copy all the code and upload the ssl from wherever you buy it.

And you have to remove the white space, after that you click on the Next button.

After that you have to verify that after clicking on the Next button, select the option with https verification here.

Then click on the Next button and you have to download the text file, then you have to create two folders in your root.

.well-known>pki-validation

and uploade here text file . and give file permission 777 (chmod 777).

After that you have to open the bitnami.conf file inside your conf directory.

/opt/lampstact/apache2/conf/binami/bitnami.conf

SSLEngine on

SSLCertificateFile "/opt/lampstack/apache2/conf/yourdomain_com.crt"
SSLCertificateChainFile "/opt/lampstack/apache2/conf/yourdomain_com.ca-bundle.crt"
SSLCertificateKeyFile "/opt/lampstack/apache2/conf/yourdomain_com.key"

Replacing these three lines under SSLEngine on and you have to give your domain in place of YourDomain_Com.

Create CRT file

/opt/lampstack/apache2/conf/yourdomain_com.crt

Now you have to create a crt file inside conf. called yourdomain_com.crt

After that when your SSL Certificate code is generated, all of its code has to be copied and paste is given in this file.

Copy all code and paste here :-

Create ca-bundle.crt File

/opt/lampstack/apache2/conf/yourdomain_com.ca-bundle.crt

Now you have to create a crt file inside conf. called yourdomain_com.ca-bundle.crt

After that simply copy this code , and paste your ca-bundle.crt file and save all file :

You do not have to change anything like tit copying and pasting.

Here you have done everything and the last step is that you have to restart your server, for that you have to go to mobaxtream and execute the code below, it will restart your server.

./ctlscript.sh restart

When your server is restarted, you have to turn on all the ports, for that the below code can be extracted together or you can do it one by one.

iptables -I INPUT -p tcp --dport 25 -j ACCEPT
iptables -I INPUT -p tcp --dport 80 -j ACCEPT
iptables -I INPUT -p tcp --dport 443 -j ACCEPT
iptables -I INPUT -p tcp --dport 465 -j ACCEPT
iptables -I INPUT -p tcp --dport 587 -j ACCEPT
iptables -I INPUT -p tcp --dport 8890 -j ACCEPT
iptables -I INPUT -p tcp --dport 514 -j ACCEPT
iptables -I INPUT -p tcp --dport 3306 -j ACCEPT
iptables -I INPUT -p tcp --dport 5005 -j ACCEPT
iptables -I INPUT -p tcp --dport 5055 -j ACCEPT

Now it’s time to check SSL 😊

Congratulations Guys You have installed ssl certificate in your website

If you have any problem related this tutorial , please comment below and tell us how did the tutorial feel.