Hack The Sec-Leading Resource Of Linux Tutorial: SSL

How to Install Nginx SSL Certificate

<div dir="ltr" style="text-align: left;" trbidi="on">
<span class="post-author" style="background-color: white; border: 0px; color: #777777; font-family: "roboto slab"; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 20px; margin: 0px; outline: 0px; padding: 0px; text-indent: 0px; text-transform: none; vertical-align: baseline; white-space: normal; word-spacing: 0px;"></span><br />
<h2 class="title single-title title20" style="-webkit-text-stroke-width: 0px; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 28px; font-style: normal; font-variant: normal; font-weight: 700; letter-spacing: normal; line-height: 38px; margin: 0px 0px 5px; opacity: 1; orphans: auto; outline: 0px; padding: 0px; text-align: start; text-indent: 0px; text-transform: none; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible; white-space: normal; widows: 1; word-spacing: 0px;">
<u><span style="color: #990000;">Install Nginx SSL Certificate</span></u></h2>
<div>
<span style="color: #222222; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">All the sites running with SSL are used https protocol on default port 443. SSL provides secure data communication by encrypting data between server and client. This article will help you to configure <a href="http://www.hackthesec.co.in/search/label/SSL">SSL </a>in Nginx server. For this example we are using a self signed certificate.</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDs3CgnVdtqDN7h0T9-eG-QFo9mkHnWVL56Le2fKgMf0nLldnLDUL01A_1nCVZPrCHm8VmiMfenu4c1f4R9W0RgwH8Yv2yufsT8LAIRJrBDmcJfiYFEVSigmjLoYEm10m0-bm21FRHctGJ/s1600/nginx-ssl-installation_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDs3CgnVdtqDN7h0T9-eG-QFo9mkHnWVL56Le2fKgMf0nLldnLDUL01A_1nCVZPrCHm8VmiMfenu4c1f4R9W0RgwH8Yv2yufsT8LAIRJrBDmcJfiYFEVSigmjLoYEm10m0-bm21FRHctGJ/s1600/nginx-ssl-installation_www.hackthesec.co.in.jpg" /></a></div>
<div>
<span style="color: #222222; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span></div>
<div>
<span style="font-family: "verdana" , "geneva" , sans-serif;"></span><br />
<div style="font-size: 15px; line-height: 26px;">
<span style="font-family: "verdana" , "geneva" , sans-serif;"><b><u><span style="color: #0b5394;">Step 1: – Install Nginx Web Server</span></u></b></span></div>
<span style="font-family: "verdana" , "geneva" , sans-serif;">
</span>
<div style="color: #222222; font-size: 15px; line-height: 26px;">
<span style="font-family: "verdana" , "geneva" , sans-serif;">We are assuming that you already have <a href="http://www.hackthesec.co.in/search/label/NGINX">Nginx </a>installed on your system but in case you don’t have installed it already, Use following command to install it.</span></div>
<span style="font-family: "verdana" , "geneva" , sans-serif;">
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="color: white; line-height: 1.3em;">$ sudo apt-get install nginx</span><span style="color: #222222; font-family: "verdana" , "geneva" , sans-serif;"><span style="line-height: 26px; white-space: normal;">
</span></span></span></pre>
<div>
<div>
<span style="font-size: 15px; line-height: 26px;"><b><u><span style="color: #0b5394;">Step 2: – Get SSL Certificate</span></u></b></span></div>
<div>
<span style="color: #222222;"><span style="font-size: 15px; line-height: 26px;">For creating <a href="http://www.hackthesec.co.in/search/label/SSL%20Encryption">SSL certificate</a>, the first requirement is to create private key and CSR. A CSR is a file which have all details about domain including a public key. first create a directory where to create csr and key.</span></span></div>
</div>
</div>
</span></div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"># mkdir /etc/nginx/ssl/
# cd /etc/nginx/ssl/</span></pre>
</div>
<div>
<span style="color: #222222; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">Now create CSR and key file with following command. Change name of files example.com.key and example.com.csr as per your domains. This command will ask for enter information about your domain. Read more about creating CSR.</span></span></div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"># openssl req -new -newkey rsa:2048 -nodes -keyout <orange style="color: orange;">example.com.key</orange> -out <orange style="color: orange;">example.com.csr</orange> </span></pre>
</div>
<div>
<orange><span style="color: #222222; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">After creating CSR, Request an SSL certificate from any certificate providers like Geotrust, Comodo, Digicert or GoDaddy etc. After getting certificate from CA, combine your primary certificate and intermediate certificate file in single file.</span></span></orange><span style="color: #222222; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;"> </span></div>
<div>
<span style="color: #222222; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span></div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"># cat example.com.crt DigiCertCA.crt >> example.com.pem</span></pre>
</div>
<div>
<span style="font-family: "verdana" , "geneva" , sans-serif;"></span><br />
<div>
<span style="font-family: "verdana" , "geneva" , sans-serif;"><span style="color: #0b5394;"><span style="font-size: 15px; line-height: 26px;"><b><u>Step 3: - Setup VirtualHost with SSL</u></b></span></span></span></div>
<span style="font-family: "verdana" , "geneva" , sans-serif;">
</span>
<div style="color: #222222; font-size: 15px; line-height: 26px;">
<span style="font-family: "verdana" , "geneva" , sans-serif;">Let’s edit Nginx configuration file <b>/etc/nginx/conf.d/example.com.conf</b> and add the following values.</span></div>
<span style="font-family: "verdana" , "geneva" , sans-serif;">
</span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># HTTPS Server Block

server {

listen   443;
    server_name example.com www.example.com;

root /var/www/xyz.com/httpdocs;
    index index.html index.htm;

ssl on;
    ssl_certificate /etc/nginx/ssl/example.com.pem;
    ssl_certificate_key /etc/nginx/ssl/example.com.key;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";
    ssl_prefer_server_ciphers on;
}</pre>
</div>
<div>
<span style="font-family: "verdana" , "geneva" , sans-serif;"><span style="line-height: 26px;"></span></span><br />
<div style="font-size: 15px;">
<span style="font-family: "verdana" , "geneva" , sans-serif;"><span style="line-height: 26px;"><b><u><span style="color: #0b5394;">Step 4: – Restart NGINX</span></u></b></span></span></div>
<span style="font-family: "verdana" , "geneva" , sans-serif;"><span style="line-height: 26px;">
</span></span>
<div style="color: #222222; font-size: 15px;">
<span style="font-family: "verdana" , "geneva" , sans-serif;"><span style="line-height: 26px;">Finally restart <a href="http://www.hackthesec.co.in/search/label/NGINX">nginx server</a> for changes takes effect.</span></span></div>
<span style="font-family: "verdana" , "geneva" , sans-serif;"><span style="line-height: 26px;">
<div style="color: #222222;">
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"># service nginx restart</span></pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></pre>
</div>
</span></span></div>
</div>

How to Install Nginx SSL Certificate

Install Nginx SSL Certificate All the sites running with SSL are used https protocol on default port 443. SSL provides secure data comm...

Apache HTTP Secure Server Configuration for CentOS 7

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="entry-title" style="background-color: white; box-sizing: border-box; color: #111111; font-family: Roboto, sans-serif; line-height: 50px; margin: 0px 0px 7px; word-wrap: break-word;">
<span style="font-size: x-large;"><u>Apache HTTP Secure Server Configuration</u></span></h1>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggHeyVUmoNeKIkBBwjp6w9tE0OlnEU9f5FNLy8noHKQ_s_cTyi8PsSLWCjaXbwr5gRYARjr8QQcccb5nDTV_-shq7uTRIrCVhm0AGvXtczAiAoj0T49-tGF57qEVLm9IsoxVlXU5R3YBJl/s1600/SSL.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggHeyVUmoNeKIkBBwjp6w9tE0OlnEU9f5FNLy8noHKQ_s_cTyi8PsSLWCjaXbwr5gRYARjr8QQcccb5nDTV_-shq7uTRIrCVhm0AGvXtczAiAoj0T49-tGF57qEVLm9IsoxVlXU5R3YBJl/s1600/SSL.png" /></a></div>
<div>
<span style="font-size: x-large;"><u><br /></u></span></div>
<div>
<div style="background-color: white; box-sizing: border-box; color: #222222; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px; margin-bottom: 26px;">
Securing the <a href="http://www.hackthesec.co.in/search/label/Apache" target="_blank">Apache</a> server is one of the most important tasks of the webmaster. In this example, we will show you in this Apache HTTP Secure Server Configuration tutorial  how to use <a href="http://www.hackthesec.co.in/search/label/SSL%20Encryption" target="_blank">ssl keys</a> with your Apache web server on your installed <a href="http://www.hackthesec.co.in/search/label/centos7" target="_blank">Centos7 </a>system. this method should also work on all Fedora or Redhat based  systems</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJzRTWvnXAQ0ZRfHxBuYgWRSlZYVURR8-Q7QJe6NnTmJyzbQWAV_0Tz7FYQ5QLj0-iETPuFhujh1IjAqm609EMcAXvGis8ycbsk-11Kv-Ed6tIbmZov1RSsRjtQWEgr1OSLnBJHKYJmiAv/s1600/system_checking_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJzRTWvnXAQ0ZRfHxBuYgWRSlZYVURR8-Q7QJe6NnTmJyzbQWAV_0Tz7FYQ5QLj0-iETPuFhujh1IjAqm609EMcAXvGis8ycbsk-11Kv-Ed6tIbmZov1RSsRjtQWEgr1OSLnBJHKYJmiAv/s1600/system_checking_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><span style="color: #0b5394; font-size: large;"><u><br />Create Certificates</u></span></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><span style="color: #222222; font-size: 15px; font-weight: normal;">Change to the following directory:</span></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="background-color: transparent; line-height: 15.6px;"><span style="color: white; font-family: "courier new" , "courier" , monospace;">[root@server /]#</span></span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;"> cd /etc/pki/tls/certs</span></span></span></pre>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><span style="color: #222222; font-size: 15px; font-weight: normal;">Run the following command to make server key file:</span></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="background-color: transparent; line-height: 15.6px;"><span style="color: white; font-family: "courier new" , "courier" , monospace;">[root@server certs]#</span></span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;"> make server.key</span></span></span></pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOd36DQttWjBm_ZM0hG34p4qGUhern7Q7wsDOxzymyXT9YAfXqnwWVlMVeqfhNR0WtxvouwiRdau8tqo_2MKQXp7WNmnbeTptl5R4d46yOOlgPznU2FN_0pywuA1ymTOw0pAdXZqMkpvsY/s1600/creating_server_key_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOd36DQttWjBm_ZM0hG34p4qGUhern7Q7wsDOxzymyXT9YAfXqnwWVlMVeqfhNR0WtxvouwiRdau8tqo_2MKQXp7WNmnbeTptl5R4d46yOOlgPznU2FN_0pywuA1ymTOw0pAdXZqMkpvsY/s1600/creating_server_key_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<span style="color: #222222; font-size: 15px;">Remove passphrase from private key:</span></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><u><span style="color: #0b5394;">Writing RSA key</span></u></strong></div>
<div>
<span style="box-sizing: border-box;"></span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="box-sizing: border-box;"><span style="font-size: large;"><span style="background-color: transparent; line-height: 15.6px;"><span style="color: white; font-family: "courier new" , "courier" , monospace;">[root@server certs]#</span></span><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px; white-space: pre;"> openssl rsa -in server.key -out server.key
Enter pass phrase for server.key:
writing RSA key</span></span></span></pre>
<span style="box-sizing: border-box;">
</span></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; font-size: 15px;"><span style="color: #0b5394;"><u>Generate CSR key file</u></span></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><span style="color: #0b5394;"><u><strong style="box-sizing: border-box; font-size: 15px;"></strong></u></span></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="background-color: transparent; line-height: 15.6px;"><span style="color: white; font-family: "courier new" , "courier" , monospace;">[root@server certs]#</span></span><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;"> </span><span style="background-color: transparent; line-height: 15.6px;"><span style="color: white; font-family: "courier new" , "courier" , monospace;">make server.csr</span></span></span></pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEir6BCHFyKHm4fOYHQpAhoFzlt15I4yI9e59EcSQr0HggCzuu1QcqNPmjcr7qrqj_CorIvFKXuMOaSZ0NH8bZQUmJsfkSNoX5JvUjS4pnYsIvt07kLkBBgRLY8t7Gf8CAws7uxAi605iokU/s1600/generate_csr_file_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEir6BCHFyKHm4fOYHQpAhoFzlt15I4yI9e59EcSQr0HggCzuu1QcqNPmjcr7qrqj_CorIvFKXuMOaSZ0NH8bZQUmJsfkSNoX5JvUjS4pnYsIvt07kLkBBgRLY8t7Gf8CAws7uxAi605iokU/s1600/generate_csr_file_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; font-size: 15px;"><strong style="box-sizing: border-box;"><u><span style="color: #0b5394;">Sign the key and make Expiration days:</span></u></strong></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><u><span style="color: #0b5394;"><strong style="box-sizing: border-box; font-size: 15px;"></strong></span></u></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: "courier new" , "courier" , monospace; font-size: large;"><span style="line-height: 15.6px;">[root@server certs]# openssl x509 -in server.csr -out server.crt -req -signkey server.key -days 1000
Signature ok
subject=/C=US/ST=AL/L=OLI/O=Hackthesec/OU=Hackthesec Tutorial/CN=server.hackthesec.co.in/emailAddress=info@hackthesec.co.in
Getting Private key
[root@server certs]#</span></span>
</pre>
<div>
<strong style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px;"><u><span style="color: #0b5394;">Configure SSL keys with Apache </span></u></strong><br />
<strong style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px;"></strong><br />
<div style="-webkit-text-stroke-width: 0px; color: black; font-family: 'Times New Roman'; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px;">
</div>
<br />
<pre style="-webkit-text-stroke-width: 0px; background-attachment: scroll; background-color: #3c3c3c; background-image: none; background-position: 0px 0px; background-repeat: repeat; border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: black; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; margin: 0px 0px 20px; orphans: auto; outline: 0px; overflow: auto; padding: 20px; text-align: left; text-indent: 0px; text-transform: none; vertical-align: baseline; widows: 1; word-spacing: 0px;"><span style="color: white; font-family: "courier new" , "courier" , monospace; font-size: large;"><span style="line-height: 15.6px;">[root@server certs]# yum -y install httpd mod_ssl</span></span>
</pre>
</div>
<div>
<span style="background-color: white; box-sizing: border-box; line-height: 15.6px; white-space: pre;">
</span></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; font-size: 15px;"><strong style="box-sizing: border-box;"><u><span style="color: #0b5394;">Enable  en Start  apache</span></u></strong></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; font-size: 15px;"><strong style="box-sizing: border-box;"></strong></strong></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: "courier new" , "courier" , monospace; font-size: large;"><span style="line-height: 15.6px;">[root@server certs]# systemctl start httpd.service
[root@server certs]# systemctl enable httpd.service</span></span></pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaF_VliP7YXsKU9BtdT6xWsUhATC1FrREY7WQLVAEBFGbooXXIDR0l1BNAAJD51j3uS8bJVnfAHIvQvP4_JsNH_h6WC8grUAKsmJsXgpp_-J1Mp5FLHLwuIKm6BpOOnxNoiLbyWkPfqY2K/s1600/httpd_checking_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaF_VliP7YXsKU9BtdT6xWsUhATC1FrREY7WQLVAEBFGbooXXIDR0l1BNAAJD51j3uS8bJVnfAHIvQvP4_JsNH_h6WC8grUAKsmJsXgpp_-J1Mp5FLHLwuIKm6BpOOnxNoiLbyWkPfqY2K/s1600/httpd_checking_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"><strong style="box-sizing: border-box;"><br /></strong></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; font-size: 15px;"><strong style="box-sizing: border-box;"><span style="color: #0b5394;">Configure  ‘/etc/httpd/conf.d/ssl.conf’</span></strong></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"><span style="font-weight: normal;">Your ssl.conf should be like this:</span></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"></strong></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;">mv /etc/httpd/conf.d/ssl.conf  /etc/httpd/conf.d/ssl.conf.orig

</span></span><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;">vi /etc/httpd/conf.d/ssl.conf</span></span></span></pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="font-size: 15px; line-height: 15.6px;">[root@server certs]# vi /etc/httpd/conf.d/ssl.conf
SSLPassPhraseDialog builtin
SSLSessionCache shmcb:/var/cache/mod_ssl/scache(512000)
SSLSessionCacheTimeout 300
SSLRandomSeed startup file:/dev/urandom 256
SSLRandomSeed connect builtin
SSLCryptoDevice builtin
<VirtualHost *:443>
DocumentRoot "/var/www/html"
ServerName 127.0.0.1:443
ErrorLog logs/ssl_error_log
TransferLog logs/ssl_access_log
LogLevel warn
SSLEngine on
SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
SSLCertificateFile /etc/pki/tls/certs/server.crt
SSLCertificateKeyFile /etc/pki/tls/certs/server.key
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>
<Directory "/var/www/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
</span></span></pre>
<div>
<span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="font-size: 15px; line-height: 15.6px;"><br /></span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgANADOe3-VFafS2jkR3xnIpqlCnAM2kqqTcmvxvuyNqronPLqqIWg80q8d90vEbABRZEfssSM_1yfDnEoDVGX_JQL7ACbKRM-TQeCVIUpuKyVlYxeWUk36WpltCJYBKHeq5ZobDupEI-0S/s1600/ssl_setup_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgANADOe3-VFafS2jkR3xnIpqlCnAM2kqqTcmvxvuyNqronPLqqIWg80q8d90vEbABRZEfssSM_1yfDnEoDVGX_JQL7ACbKRM-TQeCVIUpuKyVlYxeWUk36WpltCJYBKHeq5ZobDupEI-0S/s1600/ssl_setup_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; color: #222222; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px; margin-bottom: 26px;">
Save  and exit</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><span style="color: #0b5394;">Restart Apache  </span></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><span style="color: #0b5394;"><strong style="box-sizing: border-box; font-size: 15px;"></strong></span></strong></div>
<div style="background-color: white; box-sizing: border-box; color: #222222; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px; margin-bottom: 26px;">
Check if  the ports 80 and  443 are listening:</div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;"> </span></span><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">netstat -tulpen | grep :80</span></span></pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="font-size: 15px; line-height: 15.6px;">
</span><span style="line-height: 15.6px;"><span style="font-size: large;"> </span></span></span><span style="font-size: large;"><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">netstat -tulpen | grep :443</span></span></pre>
<div>
<span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="font-size: 15px; line-height: 15.6px;"><br /></span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjD8TEbDobkGb93B9nWhlOLZ4EBMgAL8kBOEh2soQ0i7GCT22EQtP53bm4sCcYF-xSSz1n8VT5Phb6Gl3lc7T9zh2D-M23cIaKLWPZ7W6CbOmfHHg2S9Zlhr49uZDYxK3NVrRRttG5PgxOj/s1600/checking_the_server_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjD8TEbDobkGb93B9nWhlOLZ4EBMgAL8kBOEh2soQ0i7GCT22EQtP53bm4sCcYF-xSSz1n8VT5Phb6Gl3lc7T9zh2D-M23cIaKLWPZ7W6CbOmfHHg2S9Zlhr49uZDYxK3NVrRRttG5PgxOj/s1600/checking_the_server_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"><span style="font-weight: normal;"><br />Allow the ports 80 and 443 via Iptables:</span></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"></strong></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;">vi /etc/sysconfig/iptables
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT</span></span></span></pre>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"><span style="font-weight: normal;">If you are using  Firewalld  please  do :</span></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"></strong></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;">firewall-cmd --permanent --add-port=80/tcp
</span></span><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;">firewall-cmd --permanent --add-port=443/tcp</span></span></span></pre>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"><span style="font-weight: normal;">And restart or reload the firewalls :</span></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"></strong></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;">service iptables restart
Or 
</span></span><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span></span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;"><span style="font-size: large;">firewall-cmd --reload</span></span><span style="font-size: 15px; line-height: 15.6px;">
</span></span></pre>
<div>
<span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="font-size: 15px; line-height: 15.6px;"><br /></span></span></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"><span style="font-weight: normal;">Open the browser and Check  </span><strong style="box-sizing: border-box;">https://server.hackthesec.co.in</strong></strong></strong></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOmx0xnX6B5fYo-_twuJiDNuyk15sAnp0frIxx-gxdF57ggbCnpv4_dR3K4U95wGlB3B6H4I-c_pW46l-ryCnwwnhdWKWA2QwW-IxYuCNXge3qvpdfn2ITFcPbSg7caNML0i3Df_yAxZgN/s1600/untrusted_option_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOmx0xnX6B5fYo-_twuJiDNuyk15sAnp0frIxx-gxdF57ggbCnpv4_dR3K4U95wGlB3B6H4I-c_pW46l-ryCnwwnhdWKWA2QwW-IxYuCNXge3qvpdfn2ITFcPbSg7caNML0i3Df_yAxZgN/s1600/untrusted_option_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"><strong style="box-sizing: border-box;"><br />Certificate View</strong></strong></strong></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjNEUc61mVEi0DtyqECjspIrvaNH23vzqWFMKthHhfuyOO7knJG4UqjOmPOMIkkXK85SZra-QDAjGFpyMyPuO_idvu2ycfy3mUfxhuBCFnjfXV1CZyo_QVMWIffVm28PWAzBRONgLu9lV5/s1600/certificate_view_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjNEUc61mVEi0DtyqECjspIrvaNH23vzqWFMKthHhfuyOO7knJG4UqjOmPOMIkkXK85SZra-QDAjGFpyMyPuO_idvu2ycfy3mUfxhuBCFnjfXV1CZyo_QVMWIffVm28PWAzBRONgLu9lV5/s1600/certificate_view_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px; text-align: center;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
</div>
</div>

Apache HTTP Secure Server Configuration for CentOS 7

Apache HTTP Secure Server Configuration Securing the Apache server is one of the most important tasks of the webmaster. In this ex...

How to Install Let's Encrypt Free SSL Certificate On Your Website

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: center;">
<span style="color: #990000; font-family: "georgia" , "times new roman" , serif; font-size: large;"> Let's Encrypt Free SSL Certificate</span></div>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">Another Big Milestone – Let's Encrypt is now offering Free HTTPS certificates to everyone.</span><br />
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">Let's Encrypt has opened to the public, allowing anyone to obtain Free SSL/TLS (Secure </span><br />
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">Socket Layer/Transport Layer Security) certificates for their web servers and to set up </span><br />
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">HTTPS websites in a few simple steps (mentioned below).</span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1sjOf0OvF38_XIzP1MSCnDswZKku0NZgHHzM3Z0u2KqzLUnVIxfvxHsQgWR_pD0bERZ5kp_IzF3JXdVT_d_pC-sGpGXU8Rop8uMcJbOtiwJITUBEOJZRtWyRc1k9qWxBUXzxDFhzmVPTE/s1600/free-ssl-certificate_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="394" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1sjOf0OvF38_XIzP1MSCnDswZKku0NZgHHzM3Z0u2KqzLUnVIxfvxHsQgWR_pD0bERZ5kp_IzF3JXdVT_d_pC-sGpGXU8Rop8uMcJbOtiwJITUBEOJZRtWyRc1k9qWxBUXzxDFhzmVPTE/s640/free-ssl-certificate_www.hackthesec.co.in.png" width="640" /></a></div>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><b>Let's Encrypt</b> – an initiative run by the Internet Security Research Group (ISRG) – is a new, free, and open certificate authority recognized by all major browsers, including Google's Chrome, Mozilla's Firefox and Microsoft's Internet Explorer.</span><br />
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">The Free SSL Certification Authority is now in public beta after testing a trial among a select group of volunteers.</span><br />
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="color: red; font-family: "georgia" , "times new roman" , serif; font-size: x-large;"><u><b>Why Let's Encrypt?</b></u></span><br />
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">Let's Encrypt promised to offer a certificate authority (CA) which is:</span><br />
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span>
<br />
<ul style="text-align: left;">
<li><span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><b>Free</b> – no charge for HTTPS certs.</span></li>
</ul>
<ul style="text-align: left;">
<li><span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><b>Automatic</b> – the installation, configuration as well as the renewal of the certificates do not require any administrator action.</span></li>
</ul>
<ul style="text-align: left;">
<li><span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><b>Open</b> – the automatic issuance, as well as renewal procedures, will be published as the open standard.</span></li>
</ul>
<ul style="text-align: left;">
<li><span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><b>Transparent</b> – the records of all certs issuance or revocation will be available publicly.</span></li>
</ul>
<ul style="text-align: left;">
<li><span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><b>Secure</b> – the team is committed to being a model of best practice in their own operations.</span></li>
</ul>
<ul style="text-align: left;">
<li><span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><b>Cooperative</b> – Let's Encrypt is managed by a multi-stakeholder organization and exists to benefit the community, not any of the consortium members.</span></li>
</ul>
<br />
<br />
<b><u><span style="color: red; font-size: large;">How to Install Let's Encrypt Free SSL Certificate</span></u></b><br />
<span style="color: #333333; font-family: "roboto slab"; font-size: large;"><span style="line-height: 28px;">First of all, let's say you want to get a certificate for example.com. To run the installation, you must have root access to your example.com web server.</span></span><br />
<span style="color: #333333; font-family: "roboto slab"; font-size: large;"><span style="line-height: 28px;"><br /></span></span>
<span style="color: #333333; font-family: "roboto slab"; font-size: large;"><span style="line-height: 28px;">To Generate and Install Let's Encrypt Free SSL Certificate, you must first download and run the Let's Encrypt client application.</span></span><br />
<span style="color: #333333; font-family: "roboto slab"; font-size: large;"><span style="line-height: 28px;"><br /></span></span>
<span style="color: #333333; font-family: "roboto slab"; font-size: large;"><span style="line-height: 28px;">To install Let's Encrypt Free SSL certificate follow these Steps:</span></span><br />
<span style="color: #333333; font-family: "roboto slab";"><span style="line-height: 28px;"><br /></span></span>
<span style="font-size: large;"><span style="color: #333333; font-family: "roboto slab";"><span style="line-height: 28px;">Step 1: Login to your 'example.com' web server using SSH with root access.</span></span><span style="background-color: white; color: #333333; font-family: "roboto slab"; line-height: 28px;"> </span></span><br />
<span style="background-color: white; color: #333333; font-family: "roboto slab"; font-size: 16px; line-height: 28px;"><br /></span>
<br />
<div style="background-color: white; border: 0px; color: #333333; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="background-color: transparent;">Step 2: To install the Git version control system, type the following command:</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); font-size: 12px; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-family: "times new roman"; font-size: small; line-height: normal; white-space: normal;"><span style="color: white;">apt-get install git</span></span></pre>
<div style="background-color: white; border: 0px; color: #333333; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="background-color: transparent;">Step 3: Then download and install the latest version of Let's Encrypt Client application, type the following commands:</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); font-size: 12px; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
<span style="color: white;">git clone https://github.com/letsencrypt/</span><span style="color: lime;">letsencrypt</span></div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
<span style="color: white;">cd </span><span style="color: lime;">letsencrypt</span></div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
<span style="color: white;">./letsencrypt-auto</span></div>
</pre>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">Step 4: Once the installation starts, press Enter to accept the agreement.</span><br />
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">Step 5: Then press Enter to specify the server name manually in the text box (<span style="color: red;">for example,www.example.com</span>) and then press Enter.</span><br />
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">Step 6: Next, enter your email address, where you can receive messages from Let's Encrypt and to recover lost keys, and then press Enter.</span><br />
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">Step 7: Review the 'Terms of Service,' and then press Enter to generate and install the SSL certificate.</span><br />
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">Once the installation completes, you'll receive a '<span style="color: lime;">Congratulation</span>' message.</span><br />
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><b><u>How to Configure Nginx/<a href="http://www.hackthesec.co.in/search/label/Apache" target="_blank">Apache</a> for Let's Encrypt SSL Certificate</u></b></span><br />
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">By default, Nginx or Apache web servers are not configured to how to use your new certificates.</span><br />
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">For example, in case of Nginx: To use the installed SSL certificate, you need to edit Nginx configuration file. Type the following command to open Nginx configuration file:</span><br />
<br />
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); font-size: 12px; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-family: "times new roman"; font-size: small; line-height: normal; white-space: normal;"><span style="color: white;">$ sudo nano /etc/nginx/sites-available/www.example.com</span></span></pre>
<div style="background-color: white; border: 0px; color: #333333; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="background-color: transparent;">Within that file, add the following lines.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); font-size: 12px; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
<span style="color: white;">http{</span></div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
<span style="color: white;">server{</span></div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
<span style="color: white;">…</span></div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
<span style="color: white;">listen 443 ssl;</span></div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
<span style="color: white;">server_name www.example.com;</span></div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
<span style="color: white;">ssl_certificate /etc/letsencrypt/live/www.example.com/fullchain.pem;</span></div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
<span style="color: white;">ssl_certificate_key /etc/letsencrypt/live/.wwwexample.com/privkey.pem;</span></div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
<span style="color: white;">…</span></div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
<span style="color: white;">}</span></div>
<div style="font-family: 'Times New Roman'; font-size: medium; line-height: normal; white-space: normal;">
<span style="color: white;">}</span></div>
</pre>
<div style="background-color: white; border: 0px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="background-color: transparent;"><span style="color: #333333; font-family: "roboto slab"; font-size: large;"><span style="line-height: 28px;">Save the file, and just restart your Nginx web server, using the following command:</span></span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-family: "times new roman"; font-size: small; line-height: normal; white-space: normal;"><span style="color: white;">$ </span></span><span style="background-color: transparent; white-space: normal;"><span style="color: white; font-family: "times new roman";">sudo </span><span style="color: lime; font-family: "times new roman";">nginx</span><span style="color: white; font-family: "times new roman";"> -s reload</span></span></pre>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">That's it! Check complete <a href="https://letsencrypt.readthedocs.org/en/latest/">documentation</a> here. </span><br />
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">Congratulation you have successfully installed SSL certificate for your example.com domain.</span><br />
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><b>Note : <span style="color: red;">How to Renew Let's Encrypt Free SSL Certificate:</span></b><span style="color: red;"> It is important to note that the beta version of</span></span><br />
<span style="color: red;"><span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">Let's Encrypt issues certificates that expire after 90 days. So, to renew your SSL certificate, you need</span></span><br />
<span style="color: red;"><span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span></span>
<span style="color: red;"><span style="font-family: "georgia" , "times new roman" , serif; font-size: large;">to run the letsencrypt-auto script again after expiration.</span></span><br />
<span style="color: red;"><span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><br /></span></span>
<span style="color: red;"><span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><a href="http://www.hackthesec.co.in/">Hack The Security</a></span></span><br />
<span style="color: red;"><span style="font-family: "georgia" , "times new roman" , serif; font-size: large;"><a href="https://www.twitter.com/hackthesecurity">Hack The Security Twitter</a></span></span></div>