SSL: Mengaktifkan SSL HTTPS dari CA Sectigo: Difference between revisions
From OnnoCenterWiki
Jump to navigationJump to search
Created page with "Dari Sectigo akan memperoleh 3 file dalam bentuk zip. Jika file zip dibuka akan berisi, misalnya, AAA_Certificate_Services.crt USERTrust_RSA_Certification_Authority.crt on..." |
|||
| (7 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
Dari Sectigo akan memperoleh 3 file dalam bentuk zip. Jika file zip dibuka akan berisi, misalnya, | Dari Sectigo / Comodo akan memperoleh 2 atau 3 file dalam bentuk zip. Jika file zip dibuka akan berisi, misalnya 3 file, | ||
AAA_Certificate_Services.crt | AAA_Certificate_Services.crt | ||
USERTrust_RSA_Certification_Authority.crt | USERTrust_RSA_Certification_Authority.crt | ||
onnocenter_or_id.crt | onnocenter_or_id.crt | ||
atau misalnya 2 file, misalnya | |||
sectigo-atau-comodo.ca-bundle | |||
onnocenter.or.id.crt | |||
Dengan file private key, misalnya, | Dengan file private key, misalnya, | ||
| Line 9: | Line 15: | ||
onnocenter.or.id.key | onnocenter.or.id.key | ||
Copykan, | Copykan semua file .crt, .ca-bundle, .key ke folder /etc/apache2/ssl | ||
sudo su | |||
mkdir /etc/apache2/ssl | mkdir /etc/apache2/ssl | ||
contoh, | |||
cp AAA_Certificate_Services.crt /etc/apache2/ssl | cp AAA_Certificate_Services.crt /etc/apache2/ssl | ||
cp USERTrust_RSA_Certification_Authority.crt /etc/apache2/ssl | cp USERTrust_RSA_Certification_Authority.crt /etc/apache2/ssl | ||
| Line 41: | Line 51: | ||
'''SSLCertificateFile /etc/apache2/ssl/example.com.crt''' | '''SSLCertificateFile /etc/apache2/ssl/example.com.crt''' | ||
'''SSLCertificateKeyFile /etc/apache2/ssl/example.com.key''' | '''SSLCertificateKeyFile /etc/apache2/ssl/example.com.key''' | ||
'''SSLCACertificateFile /etc/apache2/ssl/ca-certificate.ca-bundle''' | |||
# | |||
# ATAU berapa CA certificate file di letakan di folder apache2/ssl/ | |||
# | |||
'''SSLCACertificatePath /etc/apache2/ssl/''' | '''SSLCACertificatePath /etc/apache2/ssl/''' | ||
<FilesMatch "\.(cgi|shtml|phtml|php)$"> | <FilesMatch "\.(cgi|shtml|phtml|php)$"> | ||
| Line 55: | Line 69: | ||
</IfModule> | </IfModule> | ||
==Aktifkan SSL Virtual Host== | |||
enable SSL | |||
cp /etc/apache2/sites-available/default-ssl.conf /etc/apache2/sites-enabled/ | |||
atau | |||
sudo a2ensite default-ssl.conf | sudo a2ensite default-ssl.conf | ||
restart | restart apache | ||
sudo service apache2 restart | sudo service apache2 restart | ||
sudo systemctl reload apache2 | sudo systemctl reload apache2 | ||
==Cek== | |||
systemctl status apache2 | |||
pastikan tidak ada error | |||
==Referensi== | |||
* https://httpd.apache.org/docs/2.4/mod/mod_ssl.html | |||
Latest revision as of 10:21, 2 January 2022
Dari Sectigo / Comodo akan memperoleh 2 atau 3 file dalam bentuk zip. Jika file zip dibuka akan berisi, misalnya 3 file,
AAA_Certificate_Services.crt USERTrust_RSA_Certification_Authority.crt onnocenter_or_id.crt
atau misalnya 2 file, misalnya
sectigo-atau-comodo.ca-bundle onnocenter.or.id.crt
Dengan file private key, misalnya,
onnocenter.or.id.key
Copykan semua file .crt, .ca-bundle, .key ke folder /etc/apache2/ssl
sudo su mkdir /etc/apache2/ssl
contoh,
cp AAA_Certificate_Services.crt /etc/apache2/ssl cp USERTrust_RSA_Certification_Authority.crt /etc/apache2/ssl cp onnocenter_or_id.crt /etc/apache2/ssl cp onnocenter.or.id.key /etc/apache2/ssl
Edit Apache Conf
File-file ini harus di masukan ke configurasi apache. Yang perlu dilakukan di Server Apache adalah,
sudo a2enmod ssl sudo service apache2 restart
cd /etc/apache2/sites-available cp default-ssl.conf default-ssl.conf.asli sudo vi /etc/apache2/sites-available/default-ssl.conf
Edit agar,
<IfModule mod_ssl.c>
<VirtualHost _default_:443>
ServerAdmin admin@example.com
ServerName your_domain.com
ServerAlias www.your_domain.com
DocumentRoot /var/www/html
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
SSLEngine on
SSLCertificateFile /etc/apache2/ssl/example.com.crt
SSLCertificateKeyFile /etc/apache2/ssl/example.com.key
SSLCACertificateFile /etc/apache2/ssl/ca-certificate.ca-bundle
#
# ATAU berapa CA certificate file di letakan di folder apache2/ssl/
#
SSLCACertificatePath /etc/apache2/ssl/
<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory /usr/lib/cgi-bin>
SSLOptions +StdEnvVars
</Directory>
BrowserMatch "MSIE [2-6]" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
</VirtualHost>
</IfModule>
Aktifkan SSL Virtual Host
enable SSL
cp /etc/apache2/sites-available/default-ssl.conf /etc/apache2/sites-enabled/
atau
sudo a2ensite default-ssl.conf
restart apache
sudo service apache2 restart sudo systemctl reload apache2
Cek
systemctl status apache2
pastikan tidak ada error
