More

nginx server

To install the certificate, a Root SSL is needed, a Intermediate SSL, and domain/page SSL.

Combine 3 certificates in one file

Note: There is more than one method to combine it. Before you start, make sure which file is the Root, Intermediate and domain SSL. The file names used here are just examples.

1. If you have the individual certificate files (eg. AddTrustExternalCARoot.crt):

A) using the 'cat' command (Unix and Unix-like Operating Systems),
- Syntax: cat Device/Entity Cert Intermediates Root >> ssl-bundle.crt
- example: cat www_yourdomain_com.crt IntermediateCA.crt CARoot.crt >> ssl-bundle.crt
B) using a text editor:
- copy files in the following order: domain/page SSL, Intermediate, Root.
- save file as ssl-bundle.crt

2. If you have a .crt and .ca-bundle files:
A) use a cat command (Unix and Unix-like Operating Systems),
- Syntax: cat Device/Entity Cert Bundle
- example: cat www_yourdomain_com.crt www_yourdomain_com.ca-bundle >> ssl-bundle.crt
B) using a text editor:
- copy the content of www_yourdomain_com.crt before the content of www_yourdomain_com.ca-bundle
- save it as ssl-bundle.crt


Host configuration
Move the ssl-bundle.crt file to directory with all certificates files, e.g. /etc/ssl/certs/
Create or modify  website site configuration file in /etc/nginx/sites-available/ or /usr/local/nginx/sites-available/

Ensure that the following options are set:
ssl option
listen with 443,
the location of SSL: ssl_certificate
the location of private key: ssl_certificate_key







* Optional: you can set the following:
-- ssl_ciphers ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM; #Disables all weak ciphers
-- ssl_protocols SSLv3 TLSv1; #enables SSLv3/TLSv1, but not SSLv2 which is weak and should no longer be used.

Example of an SSL configured Virtual Host:

    server {
    listen 443;

    ssl on;
    ssl_certificate /etc/ssl/certs/mysite_com.crt;
    ssl_certificate_key /etc/ssl/private/mysite.key;
    #enables SSLv3/TLSv1, but not SSLv2 which is weak and should no longer be used.
    ssl_protocols SSLv3 TLSv1;
    #Disables all weak ciphers
    ssl_ciphers ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM;

    server_name mysite.com;
    }

Other questions from SSL Installation

Other categories

cyber_Folks S.A. – Cookie settings

Do you like good cookies? We too! Some cookies are required for the website to function properly. Also accept additional cookies related to service performance, social networking and marketing. Cookies are also used to personalize ads. Thanks to them, you will get the best experience of our website, which we are constantly improving. The consent granted voluntarily may be withdrawn or modified at any time. More information about the cookies used can be found in our privacy policy. If you prefer to specify your preferences precisely - see the types of cookies below.

Functional (always active)

These are cookies that are necessary for the website to function. The website will not function fully properly without accepting these types of cookies. Example: A cookie that saves your consent or objection is needed so that we know if we have your consent for certain actions on the website, they will also allow you to log in to the Customer Panel, place an order or contact us via chat.

Analytical and performance

They will make it possible to collect information on how to use the website. These files will allow us to count visits and traffic sources to our site, so we can measure and improve its performance, as well as find out which pages are the most and least popular, and understand how visitors navigate our site. They help us analyze website performance and collect synthetic information. Example: We can make heatmaps, so we know which content is readable and which is not, and this allows for better website design. Thanks to them, we can also see which blog entries were read more often and which less often, which allows us to develop more interesting content. The main tool we use is Google Analytics.

Social

It is social platform cookies that will enable you to be associated with your social media accounts. You can share content from our website there. Social network files (from third parties, such as Facebook) collect information to provide personalized advertising content. For example: Ads on your social media are better suited to you and you reduce the chance of seeing excess ads for already purchased services or products.

Marketing

These are files related to the operation of marketing automation systems and ad accountability. Thanks to them, we limit, for example, the number of views of a given advertisement. They also allow us to perform comparative tests, thanks to which we constantly improve the operation of our website. By testing multiple page layouts, it is easier to get one that provides the best readability for users. Communication also becomes more personalized. For example, we may give you an article on how to find a domain name when we see that you are looking for a domain and it is difficult for you to find a suitable name. We can also, for example, show you a hint about logging in, if we see several unsuccessful attempts in a row. Based on the information from these cookies and activity on other websites, your interest profile is built. We mainly use the Google and Facebook advertising network.