Chiang has just been helping customers to build a new Oneinstack LNMP Web site environment to deploy an SSL certificate, the customer is the purchase of Namecheap paid SSL certificate, paid 9 dollars a year. So, with this article, whether we have the same environmental needs
Buy the SSL certificate, security insurance up to pay 5 million yuan, so that the security of the site more secureWosign CA always uphold customer first, service-oriented principle, always put the interests of customers first, not only unconditional money-back guarantee, free re-issued service commitment, also according to international standards WebTrust require
Wosign CA always uphold customer first, service-oriented principle, always put the interests of customers first, not only unconditional money-back guarantee, free re-issued service commitment, also according to international standards WebTrust requirements, the global trust of the root Certification authority (CA) must buy commercial insurance, my company ( Wosign Electronic Certification Services Co., Ltd. wosign CA Limited) has been insured as requi
Nginx configuration NameCheap free SSLI. Installation Requirements
1. Nginx has compiled the ssl module. If not, re-compile the module.2. You have purchased an SSL Certificate (nonsense)Ii. Start Installation
1. Mr. Cheng's own KEY
cd /usr/local/nginx/conf/openssl genrsa -out imcat.pem 2048
2. Generate the csr File
Ope
challenge password []: // optionalAn optional company name []: // optional 3. Go to the Namecheap website to enable the SSL certificateGo to the Namecheap website and click Your ssl certificates under My Account in the SSL Certificates menu, as shown in the figure:Namechea
As early as two years ago, Google search engine guide on the proposed if the site is an HTTPS URL (installation of SSL security certificate) in a certain condition factors will be the site's weight and ranking has a certain positive effect. In the following two years, our domestic search engine also began to be based on whether the site to join the SSL
identity of both sides of the network communication digital information files, concepts similar to the daily life of driver's license or identity card similar. Digital signature is mainly used to send secure e-mail, access security site, online bidding and bidding, online contract, online ordering, secure online document transmission, online office, online payment, online tax and online shopping and other safe online electronic transactions.
The last time the old left in playing
Let ' s encrypt as a public and free SSL project is gradually spread and use by the vast number of users, is by Mozilla, Cisco, Akamai, Identrust, eff and other organizations to launch, The main goal is also to promote the Web site from HTTP to https over the process, there are more and more businesses to join and sponsorship support.
The advent of let's encrypt free SSL
services to customers. So you still want to buy a certificate issued by a professional CA institution.
2.2 From the certificate certification level to score
From the level of certificate certification, SSL certificates can be divided into DV, ov and EV three kinds:
zou.lu;Index index.html index.htm index.php;Root/home/zoulu;Error_page 404 403 http://zou.lu;SSL on;SSL_CERTIFICATE/ROOT/ZOULU/ZOU_LU.CRT;SSL_CERTIFICATE_KEY/ROOT/ZOULU/ZOULUKEY.PEM;Other configuration information is no longer duplicated, as is the case with the general site.Iv. access to test resultsIn the Firefox English version/chrome/opera/safari/ie 6, 7, 8 is not a problem, https://zou.lu/in Firefox 3.5.7 Chinese version of the problem, children
This article is reproduced from: https://typecodes.com/web/lnmppositivessl.html
The SSL certificate installation is not related to the blog program (whether it is WordPress or Typecho, etc.), but only to the type of server (such as Nginx, Apache, or IIS).
----------Instructions----------
system: Aliyun CentOS 6.5
Environment: LNMP (just configure Nginx server on line)
for my project.
Because the project structure Web end is pure html and the api is WebApi, two websites are deployed respectively. When purchasing an SSL certificate, you can buy only one domain name, in this way, the api domain name is not protected, so we can only consider combining two projects.
The first attempt is to directly copy the web pages and so on to
Https is also an ssl certificate. We generally think that https is secure, but the credit chain system of the SSL certificate is not secure. In particular, man-in-the-middle attacks are equally feasible in some countries where you can control CA root certificates. In addition, when the client is implanted with countles
essentially simply stitching together certificates, keys, and certificate Authentication Center certificates (optional) into a single file. In our example, we simply stitch the certificate and key file together in this order to create the Wzlinux.pem file. This is the preferred way for Haproxy to read SSL certificates.Cat Wzlinux.crt Wzlinux.key | Tee WZLINUX.PE
)
③ Modify nginx Configuration
Listen 443;SERVER_NAME Zou. Lu;Index index.html index.htm index. php;Root/home/zoulu;Error_page 404 403 http://zou.lu;
SSL on;Ssl_certificate/root/zoulu/zou_lu.crt;Ssl_certificate_key/root/zoulu/zoulukey. pem;
Other configuration information is the same as that of a common site.Iv. Access test results
In Firefox English version/Chrome/Opera/Safari/IE 6, 7, 8 under all no problem, https://zou.lu/in Firefox 3.5.7
, which contains the following two steps:
(1) Prepare the security certificate.
(2) Configure the Tomcat's SSL connector (Connector). First, the preparation of security certificates
There are two ways to get a security certificate: one way to buy from an authority, and one way to create self-signed certificates. Here i
resolution, registered as the release Plan.Note: As long as the domain name joins Cloudflare free Plan, when parsing a record, click traffic to this hostname will go through Cloudflare. In general, this free Universal SSL contains a large heap of other people's Domain names (the certificate is also issued by Comodo). Of course, if you care more about this, you can pay to
certificate on the website.How to apply for an Ev SSL Certificate
Due to the special nature of Ev SSL certificates, you can apply for verification of website ownership, unlike applying for a website certificate. In addition to verifying the ownership of the website, Ev
Today more and more of our web sites start using SSL certificates, not only limited in the electric business site, portal, and even many personal websites, blogs have to open SSL security in the certificate, and the old left is also considering whether to install the blog SSL certi
current SSL Digital certificate Web page can provide a global trusted certificate as low as hundred yuan.2, GitHub is a man-in-the-middle attack proves that the potential harm of unencrypted network is very large.3, hardware level Growth and algorithm optimization (such as chacha20_poly1305), encryption overhead is increasingly within the acceptable range.4,
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.