{"id":3367,"date":"2017-07-31T02:41:41","date_gmt":"2017-07-31T10:41:41","guid":{"rendered":"https:\/\/cheapsslsecurity.com\/blog\/?p=3367"},"modified":"2021-01-26T09:13:08","modified_gmt":"2021-01-26T17:13:08","slug":"how-to-enable-https-on-pound","status":"publish","type":"post","link":"https:\/\/cheapsslsecurity.com\/blog\/how-to-enable-https-on-pound\/","title":{"rendered":"How to enable HTTPS on Pound"},"content":{"rendered":"

Easily enable SSL certificate on the Pound reverse-proxy server<\/h2>\n

The Pound<\/strong> is an open source reverse-proxy server platform. It is also used as an application firewall as well as a load balancer. It doesn\u2019t serve the content on its own but it acts as a front-end server. It accepts requests from HTTP\/HTTPS clients and distributes them to the back-end servers.<\/p>\n

One of the advantages of using pound is the security that it provides. Unlike other servers, it filters the data coming from clients. Any bad or malicious request is filtered out before transferring them to the web server(s).<\/p>\n

Recently, we have been getting a lot of questions regarding SSL certificate configuration on Pound proxy server. Therefore, we have come up with this blog. This blog will guide you through the entire SSL certificate installation process.<\/p>\n

Let\u2019s get started.<\/p>\n

1. Combine the certificate files <\/strong><\/h3>\n

Before getting on with the process, you must make sure that you have the Private Key and Certificate files. You should have received the certificate files from the certificate authority (CA) and your private key during the CSR generation process. All the files will be in .pem format. You must concatenate or combine the Private Key and all the certificate files into a single new .pem<\/strong> file. You must concatenate the Private Key, Certificate file and Intermediate certificate.<\/p>\n

Keep in mind that the order is of utmost importance here.<\/p>\n

The Server Certificate must be at the top of that new .pem file and the Intermediate at the bottom.<\/p>\n

Lets\u2019 assume that the Certificate files are stored in \/etc\/test\/ssl<\/strong> location.<\/p>\n

Private key:<\/strong><\/h4>\n
$ cat \/etc\/test\/ssl\/private_keys\/host_key.pem >> \/etc\/test\/ssl\/pound\/host_key_and_cert_chain.pem<\/pre>\n
 <\/p>\n
Server Certificate:<\/strong><\/h4>\n
$ cat \/etc\/test\/ssl\/certs\/host_cert.pem >> \/etc\/test\/ssl\/pound\/host_key_and_cert_chain.pem<\/pre>\n
 <\/p>\n
Intermediate certificate:<\/strong><\/h4>\n
$ cat \/etc\/test\/ssl\/ca\/intermediate.pem >> \/etc\/test\/ssl\/pound\/host_key_and_cert_chain.pem<\/pre>\n
2. Configure the pound.cfg file<\/strong><\/h3>\n
Now open pound.cfg file and add the following line of code.<\/p>\n
\"\/etc\/puppet\/ssl\/pound\/host_key_and_cert_chain.pem\"<\/pre>\n
 <\/p>\n
3. Restart Pound<\/strong><\/h3>\n
pound -f \/etc\/pound\/pound.cfg -p \/var\/run\/pound.pid<\/pre>\n
 <\/p>\n
Finally, Pound is ready to transmit your HTTPS traffic.<\/p>\n
Important Resources<\/h3>\n