SSL Certificates with Apache on CentOS 7

This guide will show you how to enable SSL to secure websites served through Apache on CentOS or Fedora.

Before You Begin

This guide assumes that you are running Apache2 on CentOS or Fedora. Prior to starting this guide, ensure that the following steps have been taken on your Linode:
  • Familiarize yourself with our Getting Started guide and complete the steps for setting your hostname and timezone.
  • In order to configure your Apache server to function with SSL, you will need to ensure that the Apache mod_ssl module is installed on your system. You can do so by running the following command:
          # yum install mod_ss

Configure Apache to use the SSL Certificate

  1. Edit the virtual host entries in the /etc/httpd/conf.d/ssl.conf file to include the certificate files and virtual host information that should be used by each domain. For each virtual host, replicate the configuration shown below. Replace each mention of example.com with your own domain.

    If you’re using a commercially signed certificate and you’ve manually downloaded the root CA cert to /etc/pki/tls/certs, ensure that the SSLCACertificateFile value is configured to point to the root certificate directly. If the root certificate is being provided via the “ca-certificates” bundle, you can simply exclude the SSLCACertificateFile line.
    /etc/httpd/conf.d/ssl.conf
    1
2
3
4
5
6
7
8
9
10
11
12
    <VirtualHost *:443>
     SSLEngine On
     SSLCertificateFile /etc/pki/tls/certs/example.com.crt
     SSLCertificateKeyFile /etc/pki/tls/private/example.com.key
     SSLCACertificateFile /etc/pki/tls/certs/root-certificate.crt

     ServerAdmin info@example.com
     ServerName www.example.com
     DocumentRoot /var/www/example.com/public_html/
     ErrorLog /var/www/example.com/logs/error.log
     CustomLog /var/www/example.com/logs/access.log combined
</VirtualHost>
  2. Restart Apache:

    # systemctl restart httpd
You should now be able to visit your site with SSL enabled.

Test Your Configuration

Test your SSL configuration using the test page at your certificate issuer’s website, then perform a deep analysis through the Qualys SSL Labs SSL Server Test

More Information

You may wish to consult the following resources for additional information on this topic. While these are provided in the hope that they will be useful, please note that we cannot vouch for the accuracy or timeliness of externally hosted materials.

Comments

Post a Comment

Popular posts from this blog

How to measure disk performance with fio and IOPing

Image
Introduction Whether it’s a server, or a PC for work, what usually limits performances is disk speed. Even if using SSDs, their speed is not yet comparable to that of RAM and CPU. There are different tools with or without a graphical interface, written for testing disks speed. There are also people who use  dd , for example: dd if=/dev/zero of=test_file bs=64k count=16k conv=fdatasync However, in our opinion dd is the worst software for benchmarking I/O performance. In fact: it is a single-threaded, sequential-write test. Of course, if running a web server, services do not do long-running sequential writes, and use more than one thread it writes a small amount of data, so the result can be influenced by caching or by RAID’s controller it executes for just a few seconds, and everyone knows that in this way it’s not possible to have consistent results there are no reading speed tests All these points just lead to one conclusion: better to use anything else. For disk ...
Keep reading

How to Install Apache on CentOS 7

Image
Apache is an open-source web server that can be configured to serve a single or multiple websites using the same Linode. This guide explains how to install and configure the Apache web server on CentOS 7. This guide is written for a root user. Replace each instance of example.com in this guide with your site’s domain name.  Before You Begin Ensure that you have followed the Getting Started and Securing Your Server guides, and the hostname is set. To check your hostname run: # hostname # hostname -f The first command should show your short hostname, and the second should show your Fully Qualified Domain Name (FQDN). Update your system: # sudo su - # yum update Install and Configure Apache # yum install httpd Modify httpd.conf with your document root directory to point Apache to your site’s files. Add the <IfModule prefork.c> section below to adjust the resource use settings. The settings shown below are a good starting point for a 2GB: Before c...
Keep reading

How to generate and check strong passwords in Linux

Image
Introduction Different operations require different security layers. Accessing your email account, your social media, your bank account, and a remote server that you administer through SSH all need different security layers, and contain data which hold different “weight”. But, in order to accessing all these operations, you will always require the same thing:  a password . We all know that a strong password is what you really need in order to be protected from attacks, and, of course, we all know that it’s better to use different passwords for different services. A very unwise decision (and common mistake) would be using your server password to access Facebook. This decision could cause you lots of trouble. So how can we easily manage the task of creating strong passwords? In this tutorial, we will talk about how to generate and check your passwords . Generate a strong password A strong password should be composed of a mix of alphabet characters, numbers, and symbols. A se...
Keep reading