How to install SSL certificate on a sub-domain

[sathish2009]

Hi ,

I purchased a ssl certificate from godaddy and i would like to install the certificate on following domain format i.e

subdomain.domain.com

kindly guide me how can i install the certificate. Also how can i update how certificate after a year

[duane]

You can follow this instructions at http://docs.sentora.org/?node=103
You will have to change the location of the certificate to where you have it located on your server.
I use WinSCP to browse through / edit files.

Steps:
Changing Sentora port:
On Sentora Panel go to Admin -> Module Admin -> Apache Config > Override a Virtualhost [Select VHost] ->
Tick Port Override.
Forward Port 80 to Overriden Port: 443
Custom Entry:

(Don't forget to replace domain.com with your domain's URL below:)

SSLEngine on

SSLProtocol ALL -SSLv2 -SSLv3

SSLHonorCipherOrder On

SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS

SSLCertificateFile /etc/letsencrypt/live/domain.com/cert.pem

SSLCertificateKeyFile /etc/letsencrypt/live/domain.com/privkey.pem

SSLCertificateChainFile /etc/letsencrypt/live/domain.com/chain.pem

# Keeping bellow for future upgrades.

# Requires Apache >= 2.4

SSLCompression off




Save Vhost.

Wait on daemon update or run it manually and restart apache.
NOTICE: For CentOS replace apache2 with httpd
php -q /etc/sentora/panel/bin/daemon.php

service apache2 restart

Your domain should now be secured by SSL.
You can test it here: https://www.ssllabs.com/ssltest/

[sathish2009]

Hi

This is are the list of files available in the zip which received in my email

AddTrustExternalCARoot.crt
COMODORSAAddTrustCA.crt
COMODORSADomainValidationSecureServerCA.crt
subdomain_domain_com.crt

replaced my subdomain name for last crt file

how should i need to replace in the above code

[aaronlroberts]

Hi

This is are the list of files available in the zip which received in my email

AddTrustExternalCARoot.crt
COMODORSAAddTrustCA.crt
COMODORSADomainValidationSecureServerCA.crt
subdomain_domain_com.crt

replaced my subdomain name for last crt file

how should i need to replace in the above code

Hi, have you not considered LetsEncrypt?

There's a great guide on how to do it for Sentora, it's very easy and it's free: 

http://docs.sentora.org/?node=103

I use this extensively across my server, pretty much for all domains and subdomains.. The main thing is, the primary domain (for example domain.com) requires you to apply a certificate to both the TLD and the "www." part. as seen in the guide.

To explain, here's a breakdown:

Code:

./letsencrypt-auto certonly --standalone -d domain.com -d www.domain.com ^ The command to get the certificate ^ the TLD ^ the WWW.

if you want to encrypt just a subdomain (for example, abc.domain.com), the command would be:

Code:

./letsencrypt-auto certonly --standalone -d abc.domain.com    ^ The command to get the certificate ^ the subdomain

Be careful to follow the rest of the instructions very carefully from the guide, otherwise you'll kill your VHOSTS file, causing Apache to not start.

Hope this helps!

[louisluong]

Install SSL Wildcard FREE from Let's Encrypt for all SubDomain. Follow instruction for your VPS: https://tophostcoupon.com/how-to-install...ux-server/