<p>With Google’s new release of an SSL Certificates having a small ranking boost on search engine ranking, we’ve decided to release an easy tutorial on installing the ssl certificates on an Amazon EC2 Ubuntu server.</p>



<p>For those wanting to check their version of Ubuntu you can run:</p>



<pre class="wp-block-code"><code>lsb_release -a</code></pre>



<p>This is what ours returned:</p>



<pre class="wp-block-code"><code>No LSB modules are available.
Distributor ID:	Ubuntu
Description:	Ubuntu 18.04.5 LTS
Release:	18.04
Codename:	bionic</code></pre>



<p>So let’s dive into what needs to be done to install Standard SSL Certificate with Amazon EC2.</p>



<h2>MOVE SSL CERTIFICATES FILES TO SERVER</h2>



<p>You need to move your ssl files to server.  Follow the following steps.</p>



<p>1. SSH to your server</p>



<pre class="wp-block-code"><code>ssh -i yourkey.pem ubuntu@your_server_ip_or_domain</code></pre>



<p>2. Go to  your html folder &amp; make a folder to hold the ssl files</p>



<pre class="wp-block-code"><code>cd /var/www/html
sudo mkdir ssl_files</code></pre>



<p>3. Now go to your folder in which ssl files are stored on your local machine &amp; open the terminal <code><span class="highlight">CTRL+ALT+T on Ubuntu</span></code></p>



<p>4. Move the files to server via <a href="https://tcmhack.in/how-to-upload-files-via-ssh-using-scp-on-ubuntu/">Secure Copy Protocal (SCP)</a> to your newly created folder i.e <code><span class="highlight">ssl_files</span></code>. Don't know how to use SCP? <a href="https://tcmhack.in/how-to-upload-files-via-ssh-using-scp-on-ubuntu/">Click here</a></p>



<p>6. Now SSH again to your server and move the certificate files to required place.</p>



<pre class="wp-block-code"><code>ssh -i yourkey.pem ubuntu@your_server_ip_or_domain
cd /var/www/html/ssl_files

sudo cp your_site.crt /etc/apache2/ssl/your_site.crt
sudo cp your_site.key /etc/apache2/ssl/your_site.key
sudo cp your_site.ca-bundle /etc/apache2/ssl/your_site.ca-bundle</code></pre>



<h2>ADDING SSL VIRTUALHOST ENTRIES</h2>



<p>At this point, all we need to do is enable the VHOST for our site to render the SSL pages. You will either need to create a new VHOST entry if its a new site, or add this to an existing entry for your site.</p>



<pre class="wp-block-code"><code>&lt;VirtualHost *:443&gt;
    ServerName your_site.com
    ServerAlias www.your_site.com
    DocumentRoot /documentroot/
    SSLEngine on
    SSLCertificateFile /etc/apache2/ssl/your_site.crt
    SSLCertificateKeyFile /etc/apache2/ssl/private/your_site.key
    SSLCertificateChainFile /etc/apache2/ssl/your_site.ca-bundle
&lt;/VirtualHost&gt;</code></pre>



<p>Restart the apache:</p>



<pre class="wp-block-code"><code>sudo systemctl restart apache2</code></pre>



<h2>ENABLE APACHE 2 SSL MODULE IF NOT ENABLED ALREADY</h2>



<p>Next thing to do if you haven’t already is to enable the SSL module for Apache and then restarting apache. This is as simple as typing:</p>



<pre class="wp-block-code"><code>sudo a2enmod ssl
sudo systemctl restart apache2</code></pre>



<h2>ENABLE SSL TRAFFIC ON AMAZON EC2</h2>



<p>One last step is to ensure SSL traffic is enabled or your security group in Amazon. By default, Amazon does not enable this as not all sites will need it. Log in to your Amazon account, go to EC2 and your server instance. From their click on the Security Group assigned to your site, and enable HTTPs traffic for Inbound.</p>



<figure class="wp-block-image size-large"><img src="https://tcmhack.in/wp-content/uploads/2021/02/Amazon-Enabled-HTTPS-Traffic.jpg" alt="Enable ssl traffice on amazon ec2" class="wp-image-805"/><figcaption>Enable ssl traffice on amazon ec2</figcaption></figure>



<p>Load your site and you should now be able to run https! Just make sure to redirect any http url’s to https, so your not serving the same content up twice by mistake, as this would be bad for SEO and hurt your Google rankings. One main reason to add SSL is for Google rankings — we don’t want to gain a little, and lose our seo by serving duplicate content.</p>



<p>That's it. If you're still facing the issues? feel free to ask the questions in comment section.</p>

With Google’s new release of an SSL Certificates having a small ranking boost on search engine ranking, we’ve decided to release an easy tutorial...

How to install SSL Certificates on Amazon EC2 Ubuntu Server - TCMHACK

How to install SSL Certificates on Amazon EC2 Ubuntu Server

<p>Let’s Encrypt is a free SSL provider. Porkbun is very good domain registrar. We can download free SSL from porkbun dashboard. All we need is to upload it into our VPS server and need to add the path of the certificates into virtual host file.</p>



<p>Download SSL from porkbun.</p>



<div class="wp-block-image"><figure class="aligncenter size-large"><img src="http://ec2-13-127-91-65.ap-south-1.compute.amazonaws.com/wp-content/uploads/2020/07/porkbun-1024x617.jpg" alt="" class="wp-image-702"/></figure></div>



<p>You shall get a ZIP file containing the following 4 files:-</p>



<ol><li>domain.cert.pem</li><li>intermediate.cert.pem</li><li>private.key.pem</li><li>public.key.pem</li></ol>



<p>Now Upload file no. 1 and 3 only (i.e. domain.cert.pem and private.key.pem) into your VPS home folder (i.e. /home/admin/).</p>



<p>Create a Virtual Host for your domain (for example: yourdomain.com) as shown below:</p>



<pre class="wp-block-code"><code>sudo nano /etc/nginx/sites-available/wbxpress.net.conf</code></pre>



<pre class="wp-block-code"><code>server {
    server_name    yourdomain.com www.yourdomain.com;
    root           /var/www/yourdomain;
    index          index.html index.php;

    location / {
        try_files $uri $uri/ /index.php?$args;
    }

    location ~* \.php$ {
        fastcgi_pass unix:/run/php/php7.2-fpm.sock;
        include         fastcgi_params;
        fastcgi_param   SCRIPT_FILENAME    $document_root$fastcgi_script_name;
        fastcgi_param   SCRIPT_NAME        $fastcgi_script_name;
    }

    listen 443 ssl http2;
    listen &#91;::]:443 ssl http2;

    ssl_certificate /home/admin/domain.cert.pem;
    ssl_certificate_key /home/admin/private.key.pem;	
}
server {
    if ($host = www.yourdomain.com) {
        return 301 https://yourdomain.net$request_uri;
    }
    if ($host = yourdomain.com) {
        return 301 https://yourdomain.net$request_uri;
    }
    listen 80;
    listen &#91;::]:80;
    server_name yourdomain.com www.yourdomain.com;
    return 404;
}</code></pre>



<p>Also, we need to replace SSL settings as found from <a href="https://mozilla.github.io/server-side-tls/ssl-config-generator/" target="_blank" rel="noreferrer noopener">SSL Config File Generator</a> at nginx.conf file.</p>



<pre class="wp-block-code"><code>sudo nano /etc/nginx/nginx.conf</code></pre>



<pre class="wp-block-preformatted">ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS';
ssl_prefer_server_ciphers on;</pre>



<p>The above configuration works perfectly well in our case.</p>

Let’s Encrypt is a free SSL provider. Porkbun is very good domain registrar. We can download free SSL from porkbun dashboard. All we need is to u...

How to Install a Porkbun SSL on NGINX - TCMHACK

How to Install a Porkbun SSL on NGINX

<p>In this tutorial we are going to show you, with step-by-step instructions on how to install Let’s Encrypt with Apache on Ubuntu.</p>



<p>Let’s Encrypt is an open SSL Certificate Authority (CA) that offers free domain-validated (DV) certificates for your websites. SSL Certificates are used to establish a secure encrypted connection between a web server and a user’s web browser. The SSL certificates that have been issued by Let’s Encrypt are valid for 90 days and are trusted by most web browsers today.</p>



<h2>1. Requirements</h2>



<p>In order to start with the installation procedure, you need to have Apache or Nginx installed on your server. If there is no web server installed on your virtual server, please follow this tutorial to install Apache.</p>



<p>Also, you need a registered domain name with its A record pointing to your server’s IP address. For the purposes of this tutorial, we will use ‘yourdomain.com’.</p>



<h2>2. Install CertBot</h2>



<p>Run the following commands:</p>



<pre class="wp-block-code"><code>sudo apt-get install software-properties-common python-software-properties
sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update
sudo apt-get install python-certbot-apache</code></pre>



<h2>3. Install Let’s Encrypt SSL</h2>



<p>Install Let’s Encrypt SSL certificate on your domain (do not forget to replace ‘yourdomain.com’ with your actual domain):</p>



<pre class="wp-block-code"><code>sudo certbot --apache -d yourdomain.com</code></pre>



<pre class="wp-block-preformatted">Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
Enter email address (used for urgent renewal and security notices) (Enter 'c' to
cancel): admin@yourdomain.com

Please read the Terms of Service at
https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must
agree in order to register with the ACME server at
https://acme-v01.api.letsencrypt.org/directory
(A)gree/(C)ancel: A

Would you be willing to share your email address with the Electronic Frontier
Foundation, a founding partner of the Let's Encrypt project and the non-profit
organization that develops Certbot? We'd like to send you email about EFF and
our work to encrypt the web, protect its users and defend digital rights.
(Y)es/(N)o: N
Obtaining a new certificate
Performing the following challenges:
tls-sni-01 challenge for linuxhostsupport.com
Waiting for verification…
Cleaning up challenges
Created an SSL vhost at /etc/apache2/sites-available/000-default-le-ssl.conf
Deploying Certificate for yourdomain.com to VirtualHost /etc/apache2/sites-available/000-default-le-ssl.conf
Enabling available site: /etc/apache2/sites-available/000-default-le-ssl.conf</pre>



<h2>4. Redirect HTTP traffic to HTTPS</h2>



<pre class="wp-block-preformatted">Please choose whether or not to redirect HTTP traffic to HTTPS, removing HTTP access.
1: No redirect - Make no further changes to the webserver configuration.
2: Redirect - Make all requests redirect to secure HTTPS access. Choose this for
new sites, or if you're confident your site works on HTTPS. You can undo this
change by editing your web server's configuration.
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
Redirecting vhost in /etc/apache2/sites-enabled/000-default.conf to ssl vhost in /etc/apache2/sites-available/000-default-le-ssl.conf

Congratulations! You have successfully enabled https://yourdomain.com</pre>



<h2>5. Renew the SSL certificate with a cron job</h2>



<p>Create a cron job so the SSL certificate is renewed automatically. Run:</p>



<pre class="wp-block-code"><code>crontab -e</code></pre>



<p>and add the following line:</p>



<pre class="wp-block-code"><code>0 0 1 * * /usr/bin/letsencrypt renew >> /var/log/letsencrypt-renew.log</code></pre>



<p>Save and close that file and restart cron service for the changes to take effect:</p>



<pre class="wp-block-code"><code>service cron restart</code></pre>



<p>Open https://yourdomain.com in your favorite web browser, and check whether Let’s Encrypt SSL is installed properly:</p>



<figure class="wp-block-image size-large"><img src="http://ec2-13-127-91-65.ap-south-1.compute.amazonaws.com/wp-content/uploads/2020/07/ssl-secure-screenshot.png" alt="" class="wp-image-698"/></figure>



<p>That is it. Let’s Encrypt SSL certificate has been successfully installed on your website.</p>

In this tutorial we are going to show you, with step-by-step instructions on how to install Let’s Encrypt with Apache on Ubuntu.



Let’s Encrypt...

How to install Let's Encrypt on Apache2 - TCMHACK

How to install Let's Encrypt on Apache2

Follow these instructions to generate a certificate signing request (CSR) for your Apache Web server. When you have completed generating your CSR, cut/copy and paste it into the CSR field on the SSL certificate-request page.
<h2>To Generate a Certificate Signing Request for Apache 2.x</h2>
<ol>
 	<li>Log in to your server's terminal (SSH).</li>
 	<li>At the prompt, type the following command:
<pre>openssl req -new -newkey rsa:2048 -nodes -keyout&nbsp;<em>yourdomain</em>.key -out&nbsp;<em>yourdomain</em>.csr</pre>
Note: Replace yourdomain with the domain name you're securing. For example, if your domain name is coolexample.com, you would type coolexample.key and coolexample.csr.</li>
 	<li>Enter the requested information:
<ol>
 	<li>Common Name: The fully-qualified domain name, or URL, you're securing.
If you are requesting a Wildcard certificate, add an asterisk (*) to the left of the common name where you want the wildcard, for example *.coolexample.com.</li>
 	<li>Organization: The legally-registered name for your business. If you are enrolling as an individual, enter the certificate requestor's name.</li>
 	<li>Organization Unit: If applicable, enter the DBA (doing business as) name.</li>
 	<li>City or Locality: Name of the city where your organization is registered/located. Do not abbreviate.</li>
 	<li>State or Province: Name of the state or province where your organization is located. Do not abbreviate.</li>
 	<li>Country: The two-letter International Organization for Standardization (ISO) format country code for where your organization is legally registered.Note: If you do not want to enter a password for this SSL, you can leave the Passphrase field blank. However, please understand there might be additional risks.</li>
</ol>
</li>
 	<li>Open the CSR in a text editor and copy all of the text.</li>
 	<li>Paste the full CSR into the SSL enrollment form in your account.</li>
</ol>

Follow these instructions to generate a certificate signing request (CSR) for your Apache Web server. When you have completed generating your CSR...

How to install SSL Certificates on Amazon EC2 Ubuntu Server

How to Install a Porkbun SSL on NGINX

How to install Let's Encrypt on Apache2

Apache: Generate CSR (Certificate Signing Request)