SSL Certificates with Apache on CentOS 7

This guide will show you how to enable SSL to secure websites served through Apache on CentOS or Fedora.

Before You Begin

This guide assumes that you are running Apache2 on CentOS or Fedora. Prior to starting this guide, ensure that the following steps have been taken on your Linode:
  • Familiarize yourself with our Getting Started guide and complete the steps for setting your hostname and timezone.
  • In order to configure your Apache server to function with SSL, you will need to ensure that the Apache mod_ssl module is installed on your system. You can do so by running the following command:
          # yum install mod_ss

Configure Apache to use the SSL Certificate

  1. Edit the virtual host entries in the /etc/httpd/conf.d/ssl.conf file to include the certificate files and virtual host information that should be used by each domain. For each virtual host, replicate the configuration shown below. Replace each mention of example.com with your own domain.

    If you’re using a commercially signed certificate and you’ve manually downloaded the root CA cert to /etc/pki/tls/certs, ensure that the SSLCACertificateFile value is configured to point to the root certificate directly. If the root certificate is being provided via the “ca-certificates” bundle, you can simply exclude the SSLCACertificateFile line.
    /etc/httpd/conf.d/ssl.conf
    1
2
3
4
5
6
7
8
9
10
11
12
    <VirtualHost *:443>
     SSLEngine On
     SSLCertificateFile /etc/pki/tls/certs/example.com.crt
     SSLCertificateKeyFile /etc/pki/tls/private/example.com.key
     SSLCACertificateFile /etc/pki/tls/certs/root-certificate.crt

     ServerAdmin info@example.com
     ServerName www.example.com
     DocumentRoot /var/www/example.com/public_html/
     ErrorLog /var/www/example.com/logs/error.log
     CustomLog /var/www/example.com/logs/access.log combined
</VirtualHost>
  2. Restart Apache:

    # systemctl restart httpd
You should now be able to visit your site with SSL enabled.

Test Your Configuration

Test your SSL configuration using the test page at your certificate issuer’s website, then perform a deep analysis through the Qualys SSL Labs SSL Server Test

More Information

You may wish to consult the following resources for additional information on this topic. While these are provided in the hope that they will be useful, please note that we cannot vouch for the accuracy or timeliness of externally hosted materials.

Comments

Post a Comment

Popular posts from this blog

How to measure disk performance with fio and IOPing

Image
Introduction Whether it’s a server, or a PC for work, what usually limits performances is disk speed. Even if using SSDs, their speed is not yet comparable to that of RAM and CPU. There are different tools with or without a graphical interface, written for testing disks speed. There are also people who use  dd , for example: dd if=/dev/zero of=test_file bs=64k count=16k conv=fdatasync However, in our opinion dd is the worst software for benchmarking I/O performance. In fact: it is a single-threaded, sequential-write test. Of course, if running a web server, services do not do long-running sequential writes, and use more than one thread it writes a small amount of data, so the result can be influenced by caching or by RAID’s controller it executes for just a few seconds, and everyone knows that in this way it’s not possible to have consistent results there are no reading speed tests All these points just lead to one conclusion: better to use anything else. For disk benc
Keep reading

How to Install Apache on CentOS 7

Image
Apache is an open-source web server that can be configured to serve a single or multiple websites using the same Linode. This guide explains how to install and configure the Apache web server on CentOS 7. This guide is written for a root user. Replace each instance of example.com in this guide with your site’s domain name.  Before You Begin Ensure that you have followed the Getting Started and Securing Your Server guides, and the hostname is set. To check your hostname run: # hostname # hostname -f The first command should show your short hostname, and the second should show your Fully Qualified Domain Name (FQDN). Update your system: # sudo su - # yum update Install and Configure Apache # yum install httpd Modify httpd.conf with your document root directory to point Apache to your site’s files. Add the <IfModule prefork.c> section below to adjust the resource use settings. The settings shown below are a good starting point for a 2GB: Before chang
Keep reading

Install and configure Jenkins on Ubuntu 16.04

Image
Introduction Jenkins  is an automation server written in Java, as a fork of the  Hudson  project. It helps to automate part of the software development process, with aids like continuous integration, but also by further empowering teams to implement the technical part of a Continuous Delivery.  Jenkins  supports many SCM (Source Control Management) software systems including  Git ,  SVN , and  Mercurial  and provides hundreds of plugins to automate projects. This tutorial explains how to install and use Jenkins on Ubuntu 16.04 using Apache as server . Install Java Jenkins  requires Java, so, install  OpenJDK7  on the server. First, install  python-software-properties : # apt install python-software-properties Then you can add Java repository: # add-apt-repository ppa:openjdk-r/ppa Update Ubuntu repos and install OpenJDK: # apt update # apt install openjdk-7-jdk Run  $ java -version  to verify that you have OpenJDK7 correctly installed. Install Jenkins Jenkins team
Keep reading