An SSL certificate is a digital certificate that authenticates a website’s identity and enables an encrypted connection. SSL stands for Secure Sockets Layer, a security protocol that creates an encrypted link between a web server and a web browser or end users.<\/p>\n\n\n\n
Website owners need to add SSL certificates to their websites to secure online transactions and keep users information private and secure. SSL keeps internet connections secure and prevents Man-in-the-middle from reading or modifying information transferred between two systems.<\/p>\n\n\n\n
Here we will install ssl certificate on nginx web site on Linux Ubuntu.<\/p>\n\n\n\n
Go to the server that installed nginx and use OpenSSL to run below command to generating an RSA private key<\/p>\n\n\n\n
user@nginx:~$ openssl req -new -newkey rsa:2048 -nodes -keyout example.com.key -out example.com.csr\nGenerating a RSA private key\n...........................................................................................................................................................+++++\n...........+++++\nwriting new private key to 'example.com'\n-----\nYou are about to be asked to enter information that will be incorporated\ninto your certificate request.\nWhat you are about to enter is what is called a Distinguished Name or a DN.\nThere are quite a few fields but you can leave some blank\nFor some fields there will be a default value,\nIf you enter '.', the field will be left blank.\n-----\nCountry Name (2 letter code) [AU]:KZ\nState or Province Name (full name) [Some-State]:Aqmola\nLocality Name (eg, city) []:Astana\nOrganization Name (eg, company) [Internet Widgits Pty Ltd]: Your company\nOrganizational Unit Name (eg, section) []:IT\nCommon Name (e.g. server FQDN or YOUR name) []:example.com\nEmail Address []:admin@example.com\n\nPlease enter the following 'extra' attributes\nto be sent with your certificate request\nA challenge password []:\nAn optional company name []:<\/code><\/pre>\n\n\n\n
We will get 2 files: example.com.key and example.com.csr<\/p>\n\n\n\n
example.com.key is our private key, and we need move it to \/etc\/nginx\/conf.d\/ssl\/ in order to install ssl certificate later on.<\/p>\n\n\n\n
We use example.com.csr to generate ssl certificate from the certificate provider.<\/p>\n\n\n\n
Go to the certificate provider and it will ask us to provide the csr in order to create ssl certificate.<\/p>\n\n\n\n<\/figure>\n\n\n\n
As soon as we add csr file to generate ssl certificate we will get PEM Chain, PEM, DER or PKCS-7 format certificate files, and it depends on your ssl provider. here we use PEM Chain file on our nginx server.<\/p>\n\n\n\n
Upload pem-chain file into nginx server and put on \/etc\/nginx\/conf.d\/ssl\/<\/p>\n\n\n\n
Then run below command to install ssl certificate on our ERPNext site:<\/p>\n\n\n\n
user@nginx:~\/frappe-bench$ bench set-ssl-certificate example.com \/etc\/nginx\/conf.d\/ssl\/example.com.pem-chain\nnginx.conf already exists and this will overwrite it. Do you want to continue? [y\/N]: y\nuser@nginx:~\/frappe-bench$ bench set-ssl-key example.com \/etc\/nginx\/conf.d\/ssl\/example.com.key\n\/\/example.com.key is the one we have generated at first step.\nnginx.conf already exists and this will overwrite it. Do you want to continue? [y\/N]: y\nuser@nginx:~\/frappe-bench$ bench setup nginx\nnginx.conf already exists and this will overwrite it. Do you want to continue? [y\/N]: y\nuser@nginx:~\/frappe-bench$ sudo service nginx reload<\/code><\/pre>","protected":false},"excerpt":{"rendered":"
An SSL certificate is a digital certificate that authenticates a website’s identity and enables an encrypted connection. SSL stands for Secure Sockets Layer, a security protocol that creates an encrypted link between a web server and a web browser or end users. Website owners need to add SSL certificates to their websites to secure online […]<\/p>\n","protected":false},"author":1,"featured_media":5842,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[103,127],"tags":[115,126],"class_list":["post-5839","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-erpnext","tag-servers","tag-ssl-certificate"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":6}},"aioseo_notices":[],"featured_image_urls_v2":{"full":["https:\/\/saq-digital.com\/wp-content\/uploads\/2022\/10\/cyber_security_0.jpg",1000,445,false],"thumbnail":["https:\/\/saq-digital.com\/wp-content\/uploads\/2022\/10\/cyber_security_0-150x150.jpg",150,150,true],"medium":["https:\/\/saq-digital.com\/wp-content\/uploads\/2022\/10\/cyber_security_0-300x134.jpg",300,134,true],"medium_large":["https:\/\/saq-digital.com\/wp-content\/uploads\/2022\/10\/cyber_security_0-768x342.jpg",768,342,true],"large":["https:\/\/saq-digital.com\/wp-content\/uploads\/2022\/10\/cyber_security_0.jpg",1000,445,false],"1536x1536":["https:\/\/saq-digital.com\/wp-content\/uploads\/2022\/10\/cyber_security_0.jpg",1000,445,false],"2048x2048":["https:\/\/saq-digital.com\/wp-content\/uploads\/2022\/10\/cyber_security_0.jpg",1000,445,false],"trp-custom-language-flag":["https:\/\/saq-digital.com\/wp-content\/uploads\/2022\/10\/cyber_security_0.jpg",18,8,false]},"post_excerpt_stackable_v2":"
![\"\"](\"\/wp-content\/uploads\/2022\/10\/generate-ssl-add-csr.jpg\")
<\/figure>\n\n\n\n