Protection takes a very important role in the development of sites. People have experience of being exposed to external threats from intruders who are ready to steal personal data, important information and other resources from your site. Content, business, customers are all important factors, but the protection of the site is above all the confidence in security and integrity.

An SSL certificate is a special protocol that guarantees a secure and reliable connection to your site. This protocol provides reliability, security, and is guaranteed a successful and non-dangerous communication through the elements of authentication and encryption. This fact adds your site status with the suffix “S” (that is, no longer http, but httpS)

Order free certificate Let’s Encrypt

Let’s Encrypt ”is a certificate authority from which you can get a free SSL certificate for the site. They are great for small sites where users can leave some personal information: email, passwords, phone number, address. Certificate Authority Let’s Encrypt is ready to issue you a certificate absolutely FREE!

When installing a security certificate on any control panel, when ordering a certificate, you receive the following files:

• certificate.crt – the basis of the certificate for your domain name.
• private.key – the key that was generated when creating the CSR
• ca_bundle.crt – root certificate provided by your certificate authority

This is very useful for you if you own a small website and cannot afford a paid SSL certificate. We give you a free Let Encrypt security certificate for 90 days. Install the free version of Let Encrypt by clicking on the link:

https://hostry.com/solutions/ssl-for-free/

PEM files are bas64 encoded ASCII files in which certification authorities issue certificates. This format is used to store and send cryptographic keys, certificates, and other intermediate certificates.

In order to convert a CER file to PEM, you need the following:

The OpenSSL toolkit is only installed by default on Ubuntu. However, if it is not there, you can install it with the following command in Terminal:

apt install openssl

Enter your sudo password. When prompted to choose the y / n option, press y to continue. This will start the installation of OpenSSL on the system. To convert a CER file to PEM use the following syntax:

openssl x509 -inform der -in cert.cer -outform pem -out cert.pem

In the above syntax, cert.cer is the name of the security certificate you want to convert to PEM format, and cert.pem is the filename after the final conversion.

To convert a PEM file to CER use the following syntax:

openssl x509 -inform PEM -in cert.pem -outform DER -out cert.cer

After successfully installing the ssl certificate Let’s Encrypt, you need to download the files located in the “ZIP” folder. This folder must be unpacked. You can order the New SSL Certificate Let’s Encrypt by chicking in the link:  https://hostry.com/solutions/ssl-for-free/

You need to open the folder with the files needed to install the certificate. They need to copy them in a text editor.

Then, issuing the certificate you will need to configure Apache. To configure Apache2, you must save the primary, intermediate certificate and private key to a folder on the server.

After, you need to open the Apache configuration file in a text editor. Apache configuration files are usually stored in /etc/httpd/ or /etc/apache2/. The main configuration file is usually called httpd.conf or apache2.conf

If You need the site to be accessible via a secure connection (HTTPS) and also through an unsecured connection (HTTP) You will need to create a virtual host for each type of connection. Copy the existing virtual host for the http connection and change the port from 80 to 443.

Then in this case You need to add the following:

<VirtualHost 192.168.0.1:443>
     DocumentRoot /var/www/website
     ServerName www.domain.com
     SSLEngine on
     SSLCertificateFile /etc/ssl/crt/certificate.crt
     SSLCertificateKeyFile /etc/ssl/crt/private.key
     SSLCertificateChainFile /etc/ssl/crt/ca_bundle.crt
     </VirtualHost> 

1. SSLCertificateFile should be your primary certificate file for your domain name.
2. SSLCertificateKeyFile should be the key file generated when you created the CSR.
3. SSLCertificateChainFile should be the intermediate certificate file (if any) that was supplied by your certificate authority

After a successful configuration, you must save the changes (Ctrl+S).
It is best to test the configuration in advance for various syntax errors, otherwise Apache simply will not start.

In Finish, restart Apache, using the command:

systemctl restart apache2

After successfully installing the ssl certificate Let’s Encrypt, you need to download the files located in the “ZIP” folder. This folder must be unpacked. You can order the New SSL Certificate Let’s Encrypt by chicking in the link:  https://hostry.com/solutions/ssl-for-free/

You need to open the folder with the files needed to install the certificate. They need to copy them in a text editor

Then you need to go to the Cpanel Account and enter the “SECURITY” section. In this section you need to find SSL/TLS

Go to this “Install and Manage SSL for Your site (HTTPS)” panel and click on “Manage SSL Sites

Copy each file from your text editor and paste it into the appropriate fields as follows

Next, click on “Install Certificate” after which information will appear in your cPanel that“SSL Host Successfully Installed”

Then, issuing the certificate you will need to configure Nginx . You must save the primary, intermediate certificates and private key to a folder on the server

After that, you need to open the nginx configuration file. Usually, it is located in the following way: /etc/nginx/sites-available. As a rule, the file should be called default.

IMPORTANT!

You need to create two independent configurations for the HTTP and HTTPS protocols. A domain must address both protocols. If you do not register the connection via HTTPS, then your site will not be protected, and if it will not be registered through HTTP, the site will not open.

In the default configuration file you need to make changes. In order for your HTTPS to be present in the configuration file, you need to specify the following:

server {
 listen              443 ssl;
 server_name         www.example.com;
 ssl_certificate     etc/ssl/ctr/ca_bundle
 ssl_certificate_key etc/ssl/crt/private.key

 ...

*In this case, server_name is your existing domain (site), where both port 80 and port 443 will be referred to.

• Ca_bundle – Public server certificate. It is sent to each client connecting to the server
• Private.key – The private key should be stored in a file with limited access (permissions should allow the main nginx process to read this file).

After configuration, you must restart nginx:

systemctl restart nginx