http://www.onestepssl.com
Login
more links:
  order process
CSR Generation
Certificate Installation
Display your Site Seal
Site Map
 
Still unsure? Then why not try a
30 day free trial OneStepSSL
certificate...click here to learn more
Select Currency:

Installing your IIS SSL Certificate on a Apache Mod_ssl server

Step one: Copy your certificate to file You will receive an email from CompleteSSL with the certificate in the email (yourdomainname.crt). When viewed in a text editor, your certificate will look something like:

-----BEGIN CERTIFICATE----- MIAGCSqGSIb3DQEHAqCAMIACAQExADALBgkqhkiG9w0BBwGggDCCAmowggHXAhAF UbM77e50M63v1Z2A/5O5MA0GCSqGSIb3DQEOBAUAMF8xCzAJBgNVBAYTAlVTMSAw (.......) E+cFEpf0WForA+eRP6XraWw8rTN8102zGrcJgg4P6XVS4l39+l5aCEGGbauLP5W6 K99c42ku3QrlX2+KeDi+xBG2cEIsdSiXeQS/16S36ITclu4AADEAAAAAAAAA -----END CERTIFICATE-----

Copy your Certificate into the directory that you will be using to hold your certificates. In this example we will use /etc/ssl/crt/. Both the public and private key files will already be in this directory. The private key used in the example will be labeled private.key and the public key will be yourdomainname.crt.

It is recommended that you make the directory that contains the private key file only readable by root.

Step two: Install the Intermediate Certificate You will need to install the intermediate certificate in order for browsers to trust your certificate. The intermediate certificate is contained in your email. You can also download the intermediate certificate here. In the Virtual Host settings for your site, in the httpd.conf file, you will need to complete the following:

Copy the Intermediate to the same directory as httpd.conf and name it ca.txt Add the following line to the SSL section of the httpd.conf (assuming /etc/httpd/conf is the directory to where you have copied the Comodo intermediate file) If the line already exists amend it to read the following: SSLCACertificateFile /etc/httpd/conf/ca.txt

If you are using a different location and certificate file names you will need to change the path and filename to reflect the path and file name that you are using. The SSL section of the updated httpd config file should now read similar to this example (depending on the file name and directories used):

----------------------------
<IfDefine SSL>
<VirtualHost xxx.xxx.xxx.xxx:443>
....
text
....
SSLEnable
SSLCertificateFile /etc/ssl/crt/yourdomainname.crt
SSLCertificateKeyFile /etc/ssl/crt/private.key
SSLCACertificateFile /etc/httpd/conf/ca.txt
....
text
....
</VirtualHost>
----------------------------

Save your httpd.conf file and restart Apache.
copyright © 2008 onestepssl.com, a division of Complete Web Service LLC & CompleteSSL.com
support | products | contact us | Specials | ssl assurance | privacy policy | site map