

Apache HTTP Server Version 2.Installing and setting up a LAMP stack on Ubuntu 20.04 圆4.Useful, please note that we cannot vouch for the accuracy or timeliness of While these are provided in the hope that they will be You may wish to consult the following resources for additional information You should now be able to visit your site with SSL enabled. Perform a deep analysis through the Qualys SSL Labs SSL Server Test Test your SSL configuration using the test page at your certificate issuer’s website, then perform the following steps.Ĭheck for errors using openssl s_client: openssl s_client -CApath /etc/ssl/certs/ -connect :443 If troubleshooting issues, a system reboot may be required.Īfter configuration, some browsers may display the site correctly although errors still exist. # Log files ErrorLog /var/CustomLog /var/combinedĮnsure that the Apache SSL module is enabled, and enable the virtualhost configuration: a2enmod ssl ServerAlias DocumentRoot /var/# SSL configuration SSLEngine On SSLCertificateFile /etc/ssl/certs/ SSLCertificateKeyFile /etc/ssl/private/ SSLCACertificateFile /etc/ssl/certs/ca-certificates.crt #If not using a self-signed certificate, omit this line You will also need to ensure that the SSLCACertificateFile value is configured to point to the ca-certificates.crt file updated in the previous step: Replace each mention of with your own domain. For each virtual host, replicate the configuration shown below. If you expect to receive connections from clients running legacy browsers (like Internet Explorer for Windows XP), you will need to contact support to request an additional IP address.Ĭonfigure Apache to use the SSL CertificateĮdit the virtual host configuration files located in /etc/apache2/sites-available to provide the certificate file paths. SNI is accepted by most modern web browsers. If hosting multiple websites with commercial SSL certificates on the same IP address, use the Server Name Identification (SNI) extension of TLS. Prior to following this guide, ensure that the following steps have been taken on your Linode:įamiliarize yourself with our Getting Started guide and complete the steps for setting your Linode’s hostname and timezone.Ĭomplete our Hosting a Website guide, and create a site that you wish to secure with SSL.įollow our guide to obtain either a self-signed or commercial SSL certificate. This guide assumes that you are running Apache 2.4 or higher on Debian 8 or Ubuntu 14.04 or above. This guide shows you how to enable SSL to secure websites served through Apache on Debian and Ubuntu.
