{"id":381,"date":"2014-08-26T00:47:55","date_gmt":"2014-08-26T08:47:55","guid":{"rendered":"https:\/\/cheapsslsecurity.com\/blog\/?p=381"},"modified":"2021-01-26T09:13:20","modified_gmt":"2021-01-26T17:13:20","slug":"install-ssl-certificate-ubuntu-server-using-apache","status":"publish","type":"post","link":"https:\/\/cheapsslsecurity.com\/blog\/install-ssl-certificate-ubuntu-server-using-apache\/","title":{"rendered":"How to Install an SSL Certificate on Ubuntu Server using Apache"},"content":{"rendered":"

Ubuntu<\/strong> is a Debian-based <\/i>Linux operating system, which is one of the most popular desktop Linux <\/i>distributions to date. With its first release in October 2004, Ubuntu predictably releases updated versions every six months.<\/p>\n

To install SSL certificate on Ubuntu<\/strong> server, first, you need to download the primary, intermediate and root certificate files, which you will receive via email from your Certificate Authority (CA). After downloading these certificate files, you need to generate a Certificate Signing Request (CSR), which can be easily done by using our CSR Tool<\/b><\/a>.<\/p>\n

\"Ubuntu<\/p>\n

Steps to install \/ Enable SSL certificate on Ubuntu using Apache<\/h2>\n

Step 1: Copy the Certificate Files<\/span><\/h3>\n

To get started, copy the primary (yourdomain.crt) and intermediate certificate (abcCA.crt) files into your Ubuntu server directory where you intend to store all your certificate and key files.<\/p>\n

 <\/p>\n

Step 2: Edit Apache .config File<\/span><\/h3>\n

(1)<\/strong> Normally, you can find Ubuntu\u2019s Apache configuration file for your SSL site in\/etc\/apache2\/sites-enabled\/your_site_name<\/i><\/p>\n

(2)<\/strong> But, if you don\u2019t find that .config<\/b> file in the \u2018sites-enabled\u2019<\/i> folder, you need to run the command sudo a2ensite your_site_name.<\/i><\/p>\n

(3)<\/strong> After locating the file, open it using any text editor<\/p>\n

Note: To access your website with both secured HTTPS and non-secured HTTP, you must need two separate files on your \u2026\/sites-enabled\/<\/i> folder. One file will be for port 80 and the other for port 443.<\/strong><\/span><\/p>\n

(4)<\/strong> To make your site accessible only with a secure protocol, you need to configure the Virtual Host<\/b> block.<\/p>\n

 <\/p>\n

Step 3: Configuration of Virtual Host block<\/span><\/h3>\n

Your \u2018Virtual Host\u2019 block will look similar to the following image:<\/p>\n

\"Virtual<\/p>\n

(1)<\/strong> In virtual host block, you need to configure an SSL certificate file, key file and chain file.<\/p>\n

(2)<\/strong> Now, adjust the following file names as per your SSL certificate and make the changes accordingly:<\/p>\n

(i)<\/strong> SSLCertificateFile: Your certificate file (yourdomain.crt)<\/p>\n

(ii)<\/strong> SSLCertificateKeyFile: Your key file(generated during CSR-creation)<\/p>\n

(iii)<\/strong> SSLCertificateChainFile:\u00a0 The intermediate certificate file (CA.crt)<\/p>\n

Note: Try using SSLCACertificateFile <\/i>instead, <\/i>if the SSLCertificateFile directive doesn\u2019t work.<\/b><\/p>\n

Save the data once you are done editing the VirtualHost<\/i>block.<\/i><\/p>\n

Step 4: Test your Apache .Config File and Restart<\/span><\/h3>\n

Once you save the .config<\/i> file, it is necessary to test that file for any errors by running the following command:<\/p>\n

apachectlConfigtest<\/b><\/p>\n

If your .config <\/i>file works well, the final step is to restart your Apache server using these commands:<\/p>\n

apachectl stop<\/b><\/p>\n

<\/b>apachectl start<\/b><\/p>\n

With this step, your SSL certificate is successfully installed on your Ubuntu Server and your domain is now live with HTTPS:\/\/ <\/i><\/b>security.<\/p>\n

(I)<\/strong> If the SSL is installed properly, you will able to see your certificate details.<\/p>\n

(II)<\/strong> If it is not installed properly, we would recommend going back to Step 1 and retracing everything.<\/p>\n

 <\/p>\n

Important Resource<\/h3>\n

Please click here<\/b><\/a>, to check, if your certificate is installed properly or not.<\/p>\n