Hack The Sec-Leading Resource Of Linux Tutorial: nginx_ssl

<div dir="ltr" style="text-align: left;" trbidi="on">
<span class="post-author" style="background-color: white; border: 0px; color: #777777; font-family: "roboto slab"; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 20px; margin: 0px; outline: 0px; padding: 0px; text-indent: 0px; text-transform: none; vertical-align: baseline; white-space: normal; word-spacing: 0px;"></span><br />
<h2 class="title single-title title20" style="-webkit-text-stroke-width: 0px; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 28px; font-style: normal; font-variant: normal; font-weight: 700; letter-spacing: normal; line-height: 38px; margin: 0px 0px 5px; opacity: 1; orphans: auto; outline: 0px; padding: 0px; text-align: start; text-indent: 0px; text-transform: none; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible; white-space: normal; widows: 1; word-spacing: 0px;">
<u><span style="color: #990000;">Install Nginx SSL Certificate</span></u></h2>
<div>
<span style="color: #222222; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">All the sites running with SSL are used https protocol on default port 443. SSL provides secure data communication by encrypting data between server and client. This article will help you to configure <a href="http://www.hackthesec.co.in/search/label/SSL">SSL </a>in Nginx server. For this example we are using a self signed certificate.</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDs3CgnVdtqDN7h0T9-eG-QFo9mkHnWVL56Le2fKgMf0nLldnLDUL01A_1nCVZPrCHm8VmiMfenu4c1f4R9W0RgwH8Yv2yufsT8LAIRJrBDmcJfiYFEVSigmjLoYEm10m0-bm21FRHctGJ/s1600/nginx-ssl-installation_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDs3CgnVdtqDN7h0T9-eG-QFo9mkHnWVL56Le2fKgMf0nLldnLDUL01A_1nCVZPrCHm8VmiMfenu4c1f4R9W0RgwH8Yv2yufsT8LAIRJrBDmcJfiYFEVSigmjLoYEm10m0-bm21FRHctGJ/s1600/nginx-ssl-installation_www.hackthesec.co.in.jpg" /></a></div>
<div>
<span style="color: #222222; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span></div>
<div>
<span style="font-family: "verdana" , "geneva" , sans-serif;"></span><br />
<div style="font-size: 15px; line-height: 26px;">
<span style="font-family: "verdana" , "geneva" , sans-serif;"><b><u><span style="color: #0b5394;">Step 1: – Install Nginx Web Server</span></u></b></span></div>
<span style="font-family: "verdana" , "geneva" , sans-serif;">
</span>
<div style="color: #222222; font-size: 15px; line-height: 26px;">
<span style="font-family: "verdana" , "geneva" , sans-serif;">We are assuming that you already have <a href="http://www.hackthesec.co.in/search/label/NGINX">Nginx </a>installed on your system but in case you don’t have installed it already, Use following command to install it.</span></div>
<span style="font-family: "verdana" , "geneva" , sans-serif;">
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="color: white; line-height: 1.3em;">$ sudo apt-get install nginx</span><span style="color: #222222; font-family: "verdana" , "geneva" , sans-serif;"><span style="line-height: 26px; white-space: normal;">
</span></span></span></pre>
<div>
<div>
<span style="font-size: 15px; line-height: 26px;"><b><u><span style="color: #0b5394;">Step 2: – Get SSL Certificate</span></u></b></span></div>
<div>
<span style="color: #222222;"><span style="font-size: 15px; line-height: 26px;">For creating <a href="http://www.hackthesec.co.in/search/label/SSL%20Encryption">SSL certificate</a>, the first requirement is to create private key and CSR. A CSR is a file which have all details about domain including a public key. first create a directory where to create csr and key.</span></span></div>
</div>
</div>
</span></div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"># mkdir /etc/nginx/ssl/
# cd /etc/nginx/ssl/</span></pre>
</div>
<div>
<span style="color: #222222; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">Now create CSR and key file with following command. Change name of files example.com.key and example.com.csr as per your domains. This command will ask for enter information about your domain. Read more about creating CSR.</span></span></div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"># openssl req -new -newkey rsa:2048 -nodes -keyout <orange style="color: orange;">example.com.key</orange> -out <orange style="color: orange;">example.com.csr</orange> </span></pre>
</div>
<div>
<orange><span style="color: #222222; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">After creating CSR, Request an SSL certificate from any certificate providers like Geotrust, Comodo, Digicert or GoDaddy etc. After getting certificate from CA, combine your primary certificate and intermediate certificate file in single file.</span></span></orange><span style="color: #222222; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;"> </span></div>
<div>
<span style="color: #222222; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span></div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"># cat example.com.crt DigiCertCA.crt >> example.com.pem</span></pre>
</div>
<div>
<span style="font-family: "verdana" , "geneva" , sans-serif;"></span><br />
<div>
<span style="font-family: "verdana" , "geneva" , sans-serif;"><span style="color: #0b5394;"><span style="font-size: 15px; line-height: 26px;"><b><u>Step 3: - Setup VirtualHost with SSL</u></b></span></span></span></div>
<span style="font-family: "verdana" , "geneva" , sans-serif;">
</span>
<div style="color: #222222; font-size: 15px; line-height: 26px;">
<span style="font-family: "verdana" , "geneva" , sans-serif;">Let’s edit Nginx configuration file <b>/etc/nginx/conf.d/example.com.conf</b> and add the following values.</span></div>
<span style="font-family: "verdana" , "geneva" , sans-serif;">
</span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># HTTPS Server Block

server {

listen   443;
    server_name example.com www.example.com;

root /var/www/xyz.com/httpdocs;
    index index.html index.htm;

ssl on;
    ssl_certificate /etc/nginx/ssl/example.com.pem;
    ssl_certificate_key /etc/nginx/ssl/example.com.key;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";
    ssl_prefer_server_ciphers on;
}</pre>
</div>
<div>
<span style="font-family: "verdana" , "geneva" , sans-serif;"><span style="line-height: 26px;"></span></span><br />
<div style="font-size: 15px;">
<span style="font-family: "verdana" , "geneva" , sans-serif;"><span style="line-height: 26px;"><b><u><span style="color: #0b5394;">Step 4: – Restart NGINX</span></u></b></span></span></div>
<span style="font-family: "verdana" , "geneva" , sans-serif;"><span style="line-height: 26px;">
</span></span>
<div style="color: #222222; font-size: 15px;">
<span style="font-family: "verdana" , "geneva" , sans-serif;"><span style="line-height: 26px;">Finally restart <a href="http://www.hackthesec.co.in/search/label/NGINX">nginx server</a> for changes takes effect.</span></span></div>
<span style="font-family: "verdana" , "geneva" , sans-serif;"><span style="line-height: 26px;">
<div style="color: #222222;">
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"># service nginx restart</span></pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></pre>
</div>
</span></span></div>
</div>

How to Install Nginx SSL Certificate

Install Nginx SSL Certificate All the sites running with SSL are used https protocol on default port 443. SSL provides secure data comm...