Vultr SSL Certificate Installation Tutorial
I’m Tony from Tony teaches Tech and today I’m going to show you how to install an SSL certificate on voltar so let’s get right into it right here I have my travel blog website it is not secure as you can see here that means the HTTPS version of the website is not set up so in order to set that up we need an SSL certificate the place that I get all of my SSL certificates from is Namecheap namecheap.com so in here under the security tab you can see an SSL certificate section and the reason I get them from Namecheap is because they are cheap as the name implies so a positive SSL certificate is just.
I’m Just Going to Do This for One
seven dollars and eighty-eight cents per year go ahead and click buy now and by the way while we’re looking at that I do have a link down below if you purchase through my link I will earn a small commission so thank you in advance so I’m just going to do this for one year and there’s a coupon code so check for that below as well in the description and that’s just six dollars and eighty eight cents for one year so go ahead and click on confirm order and pay now alright our purchase has been made now we can go back to our Namecheap dashboard okay and on this page on the left-hand side click on.
product list and here we should see we do see our SSL certificate which needs activation so go ahead and click on activate and the first thing we need to do is enter a CSR or a certificate signing request so in order to do that just open up a terminal window and type in the following I’m just gonna paste it in here I’ll have it linked down below if you just want to copy and paste it there we go so you don’t know what that means don’t worry I don’t really fully understand it either but I do understand the overall process of what we’re trying to do so go ahead and fill out the information so.
our country name two letter code is US state or province I’m going to say Pennsylvania for me the city is reading this is going to be different for you organization named Tony travels this is my travel blog organizational unit some of these can be optional so I’m gonna see if that’s yep we can leave that blank common name fully qualified host name Tony travels comm email address I’m going to put admin at Tony travels calm and please enter the following extracts this again this is a optional I’m gonna just leave it blank and that’s that so if you look at your directory now you’ll have a server key and a server dot CSR there is.
Domain Name Tony Travels Comm Go Ahead And
the CSR that we’re looking for so go ahead and view that file the CSR file and all we need to do is copy this and paste it into here and if we did everything correctly it should automatically detect our domain name Tony travels comm go ahead and click on next this is asking us where the certificate is gonna end up for us it’s going to be on an engine X Server because we’re working with WordPress on voltar and that is installed using nginx same thing happens if it you’re doing something with Apache so we’re gonna do a domain validation via email and we’re gonna send it to admin at Tony travels comm which it again.
automatically detect it from our certificate signing request and for that the admin email is a minute Tony travels comm one more time and finally go ahead everything looks good click on submit so we’ll let that do its thing and there we go so it says we initiate the activation or certificate to complete the process you need to finalize the domain control value procedure so we picked the email options so let’s go check our email to see if we have anything in there so let’s login to admin and Tony travels comm and see if we have that not yet so when we have that I’ll check that game with you guys all right so just like.
30 to 45 seconds later we have that email and we’re gonna go ahead and open that and see what we got in here so yes so domain control validation for Tony travels comm let’s see so it’s saying that to permit issuance of the certificate please browse here and enter the following validation code so just copy this click on this link and in the resulting page go ahead and paste it in there and it says Thank You Vicker echt code your certificate will now be issued an email to shortly so we’re done with that that was extremely easy let’s refresh see if we got the next email and we do not so check back in with.
And You’ll See Here That We Have An
you when that happens ok so that took like 2 minutes or so we got two emails in that time and this first one here with the trust low but you can just ignore that but the one we’re interested in is this second one we can open that up and you’ll see here that we have an attachment a zip file so that contains our SSL certificate so we want to download that and click it to open it or unzip it and open it and in here you’ll see two files one is a CA bundle file and another and the other one is a dot CR t– file so the one thing we want to do is.
combine these two files the CR T and the CA bundle file and we can do that really easily with a command on our command lines so if we go to that folder which is in our downloads folder well for me it’s in my downloads folder and then Tony travels comm there’s our two files so all we have to do is cat the Tony travels underscore comm dot CRT and the other file which is Tony Joe see a bundle and redirect that information into a file called cert chain dot CRT and honestly these then name the outfit name search chain that CRT doesn’t really matter but that’s just like one of the conventions that is used.
so hit that in all all this really does is takes the first file up here and puts it at the top of the file and takes the other file and puts it next to it down below so you just putting them into into a chain essentially the next thing we want to do is to log into our voltar server I’m assuming at this point that you have that spun up that’s why you’re watching this tutorial in order to do that you on your command line you can go to SSH root at your domain name so for me it’s Tony travels comm and if you don’t know your password you just go into your voltar dashboard.
You Should See Your Pre-existing Ssl Certificates And
copy it and you can paste it to do that so that should work yep we’re logged into our remote server now for me located in Chicago first we want to do is go to the e.t.c nginx directory and in here you should see your pre-existing ssl certificates and those are self sign so they’re they’re not any good what we want to do is to delete them server just delete everything server dot star and we want to now take our CRT that we have on our local computer and our key on our local computer and put it up here so how do we do that well let’s open up a new terminal tab and go back.
into our downloads folder and into the Tony travels lots of folder to call Tony and you’ll see there are files here so we can use the SCP command if you’re not familiar with that that’s secure copy command so I’ll show how to do it so type SCP it’s kind of like SSH SCP let’s start with the server key and that’s the source file the destination is a root at Tony travels comm: and now this is going to be an absolute path to where we want this thing to end up so if you remember it’s ET c / nginx / SSL so and we’re going to keep the name server dot key okay let’s see if.
Root at Tony Travels Comm Slash Your Colon
that works if it does all we have to do is type in the password or paste it in this case and bam let’s go over to our other tab and nothing was there before now we see our server key there so that’s one file down let’s get that CRT over there as well so we’re going to do the similar thing SCP and we want the cert chain dot CRT we have a couple CRTs we want to searching and again it’s going to be root at Tony travels comm slash your colon or what is that called yeah it’s cooling et Cie nginx SSL and then keep the same name search underscore chain dot CRT CRT hit.
enter asking for a password paste it in and bam let’s make sure that’s there it is we’re doing good let’s back out a level on our server to go into just et Cie nginx here we have a bunch of files and folders we’re actually interested in navigating into the comedy directory oops the comedy directory and in here you’ll see our configuration files for our various web sites so there’s an HTTP version of your website an HTTP version of your website and you can have multiple websites running on here people will do that in another tutorial but for now we just want one web site and actually because Google’s so strict about it I highly recommend.
To Do Let’s Go on a WordPress Underscore
it you should always have just one version of your website in HTTP for so what we want to do first is redirect all of our HTTP traffic to our HTTPS version of our website so real easy to do let’s go on a WordPress underscore HTTP cough and at the top of this file we’re pretty much going to get rid of everything from here on so if you’re using vim I’m okay with in but in order to delete a whole bunch of lines you could just type a really big number like 999 and then DD for delete you want to make sure we close that tag so I to go into insert mode and then hit.
that close curly brackets let’s just fix up a couple things here we want to oh boy I’m doing a screen recording and I don’t know how to get out of oh here we go okay nevermind forget I said anything let’s go over the server name underscore thing we want to explicitly define our server here so let’s get rid of all this and what we want to put here is Tony travels calm and WW Tony travels calm so for you it’s going to be your WW and your non www version I think this is okay we can actually just get rid of default server and just do a listen ad and that’s all we really need.
Slash Slash Tony Travels Comm Then You’re Gonna
for this I’m sorry there’s that that’s not all we need we need to add one more piece of information that is a redirect so a good way to do this is a permanent 301 redirect and it’s going to look like this so type in return 301 and it’s going to be the fully qualified domain name so HTTP colon slash slash Tony travels comm then you’re gonna do dollar sign requests underscore URI and then semicolon I have my cheat sheet over here so that’s why I keep looking over that way so this this will do the redirect from anybody who goes to the HD yeah I’m sick of saying it anybody goes to HD TV will.
be redirected to HTTPS damn save that with writing in quitting okay one more thing to do here let’s go to the WordPress HTTP comm file and let’s change a couple things here so this is how the default configuration file looks get rid of this default server and a good practice is to type in HTTP two here which is something that Google wants you to have we’re also going to get rid of this with the underscore okay so basically next to server name I’m going to do what we just did in the other file it’s going to be Tony travels calm and WW Tony travels calm and now you’ll see here the SSL Certificates so we.
Navigated to Tony Travels Calm It Was A
have our server ducky but we renamed the other one from server dot cert to cert chain that’s CRT and that should be it yeah I’m pretty sure that’s it so let’s go ahead and save that file and I guess let’s restart and you’re next so to do that let’s see if I have it saved yeah so sudo systemctl restart nginx hit enter now let’s go back to our web site this is the moment of truth see if we did everything correctly so before we navigated to Tony travels calm it was a non secure version we took care of redirecting everything so if we hit refresh this should just take us to HTTP version okay and.
there you have it we got the lock icon on all of our pages if you click on it it says connection is secure so we pretty much accomplished everything that we set out to do today we purchase an SSL certificate and we install it on voltar under the nginx web server and yeah it’s redirecting from HTTP to HTTPS so everything is looking good if you guys have any questions about the content today let me know in the comments below also if you have a specific that you want to see within the context of you know WordPress hosting anything in between let me know in the comments below consider if you got value out of and.
Do I’ll See You in The
if you do I’ll see you in the next one.
