Nginx

SSL Certificate Installation on Nginx or Apache

Log — Tags: Apache, Nginx, SSL — Posted by Starck on January 11, 2014

SSL Certificate

Before we can sign up for a certificate we have to generate a RSA private key

openssl genrsa -des3 -out example.com_secure.key 2048

1	openssl genrsa -des3 -out example.com_secure.key 2048

You will be prompted to provide a passphrase(required). The key file is secured with this passphrase but we will eventually remove this protection.

Then, we will use this private key to generate a certificate signing request which is then submitted to the CA.

openssl req -new -key example.com_secure.key -out example.com.csr

1	openssl req -new -key example.com_secure.key -out example.com.csr

Remove the encryption from the RSA private key

Before we start configuring HTTPS Server we have to make sure to remove the passphrase from our RSA key. Otherwise you have to provide the password every time server started.

openssl rsa -in example.com_secure.key -out example.com_secure.key

1	openssl rsa -in example.com_secure.key -out example.com_secure.key

The unencrypted private key should only be readable by the owner of the Nginx or Apache master process. Most of the time this is the root user:

chmod 400 example.com_secure.key
sudo chown root:root example.com_secure.key

1 2	chmod 400 example.com_secure.key sudo chown root:root example.com_secure.key

Generate SSL Certificate

openssl x509 -req -days 365 -in example.com_secure.csr -signkey example.com_secure.key -out example.com_secure.crt

1	openssl x509 -req -days 365 -in example.com_secure.csr -signkey example.com_secure.key -out example.com_secure.crt

Setting up server

server {

    listen 443;
    server_name example.com;
    root /var/www/example.com

    ssl on;
    ssl_certificate /path/example.com_secure.crt;
    ssl_certificate_key /path/example.com_secure.key;

}

server {

listen 443;

server_name example.com;

root /var/www/example.com

ssl on;

ssl_certificate /path/example.com_secure.crt;

ssl_certificate_key /path/example.com_secure.key;

}

Apache

<VirtualHost *:443>
    DocumentRoot /var/www/example.com
    SSLEngine on
    SSLCertificateFile /path/example.com_secure.crt
    SSLCertificateKeyFile /path/example.com_secure.key
    SSLCertificateChainFile /path/example.com_secure.crt
</VirtualHost>

DocumentRoot /var/www/example.com

SSLEngine on

SSLCertificateFile /path/example.com_secure.crt

SSLCertificateKeyFile /path/example.com_secure.key

SSLCertificateChainFile /path/example.com_secure.crt

</VirtualHost>

Comments (0)

Nginx with Apache + FastCGI + PHP-FPM

Coding — Tags: Apache, Nginx, php5-fpm, Ubuntu — Posted by Starck on January 10, 2014

Install Apache2 + FastCGI + PHP-FPM

Apache Settings

/etc/apache2/sites-availabe/test.server.com.conf:

<VirtualHost 127.0.0.1:8080>
        ServerName test.server.com
        ServerAdmin webmaster@server.com
        DocumentRoot /var/www/test.server.com
        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>

ServerName test.server.com

ServerAdmin webmaster@server.com

DocumentRoot /var/www/test.server.com

ErrorLog ${APACHE_LOG_DIR}/error.log

CustomLog ${APACHE_LOG_DIR}/access.log combined

</VirtualHost>

/etc/apache2/ports.conf:

Listen 127.0.0.1:8080

1	Listen 127.0.0.1:8080

Install Nginx

sudo apt-get install nginx

/etc/nginx/sites-available/test:

server {
        listen   80;

        root /var/www/test.server.com;
        index index.html index.php index.htm;

        server_name test.server.com;

        location / {
            # Custom 404 page
            # try_files $uri $uri/ /not_found_error.html;
        }

        location ~ \.php$ {

            proxy_set_header X-Real-IP  $remote_addr;
            proxy_set_header X-Forwarded-For $remote_addr;
            proxy_set_header Host $host;
            proxy_pass http://127.0.0.1:8080;

         }

         location ~ /\.ht {
                deny all;
        }
}

server {

listen 80;

root /var/www/test.server.com;

index index.html index.php index.htm;

server_name test.server.com;

location / {

# Custom 404 page

# try_files $uri $uri/ /not_found_error.html;

}

location ~ \.php$ {

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $remote_addr;

proxy_set_header Host $host;

proxy_pass http://127.0.0.1:8080;

}

location ~ /\.ht {

deny all;

}

sudo ln -s /etc/nginx/sites-available/test /etc/nginx/sites-enabled/test

sudo rm /etc/nginx/sites-enabled/default

Restart Server

sudo service nginx restart

sudo service apache2 restart

sudo service php5-fpm restart

Comments (0)