Call Us +27.84.751.5616
Facebook X-twitter Linkedin
The SSL Blog

Call Us +27.84.751.5616

Facebook X-twitter Linkedin

How to install an SSL/TLS Certificate on Apache Server

Install SSL/TLS Certificate on Apache Server

You’re on the right track to secure your Apache server!

Here’s how to install an SSL/TLS certificate:

Obtain Your SSL/TLS Certificate

Before installing, you need to have an SSL/TLS certificate. This typically involves these steps:

  1. Determine the Type of Certificate Needed: Decide if you need a Single Domain, Wildcard, or Multi-Domain (SAN) certificate.
  2. Select a Certificate Authority (CA): Choose a trusted CA to purchase your certificate from. SSLAfrica.com offers the broadest selection, choose from Digicert, Sectigo, Comodo, RapidSSL etc.
  3. Generate a Certificate Signing Request (CSR): This is a text file containing your domain name and other information. You can usually generate this through your server’s control panel or using OpenSSL. For example, using OpenSSL, you might use a command like: openssl req -new -newkey rsa:2048 -nodes -keyout yourdomain.key -out yourdomain.csr.
  4. Submit the CSR to the CA: Follow the CA’s instructions to submit your CSR and provide any necessary organization information.
  5. Domain Validation: The CA will validate your domain ownership through methods like email, file-based, or DNS-based verification.
  6. Receive the SSL/TLS Certificate: Once validated, the CA will issue your certificate files. These usually include the primary certificate (e.g., yourdomain.crt) and possibly intermediate certificates (e.g., intermediate.crt or bundle.crt).

Install the SSL/TLS Certificate on Your Apache Server

The exact steps can vary slightly depending on your Apache configuration and operating system, but here’s a general guide:

  1. Ensure Apache has the SSL Module Enabled: You’ll need to make sure the mod_ssl module is enabled in your Apache configuration. On Debian/Ubuntu systems, you can usually enable it with the command: sudo a2enmod ssl. On CentOS/RHEL systems, the module might already be enabled or you might need to install it using sudo yum install mod_ssl.
  2. Locate Your Apache Configuration Files: The main Apache configuration file is often named httpd.conf or apache2.conf. Virtual host configurations are usually in separate files within a directory like /etc/apache2/sites-available/ or /etc/httpd/conf/vhosts/. You’ll need to edit the configuration for the specific website you want to secure.
  3. Edit Your Virtual Host Configuration: Find the virtual host block for your website (usually listening on port 80 for HTTP). You’ll need to create a new virtual host block for HTTPS (listening on port 443) or modify the existing one.

Here’s an example of how a basic HTTPS virtual host configuration might look like:

In Apache

<VirtualHost *:443>
ServerName yourdomain.com
DocumentRoot /var/www/yourdomain.com/public_html

SSLEngine on
SSLCertificateFile /path/to/yourdomain.crt
SSLCertificateKeyFile /path/to/yourdomain.key
SSLCertificateChainFile /path/to/intermediate.crt
</VirtualHost>

  1. SSLEngine on: This directive enables the SSL/TLS engine for this virtual host.
  2. SSLCertificateFile /path/to/yourdomain.crt: Replace /path/to/yourdomain.crt with the actual path to your primary SSL/TLS certificate file.
  3. SSLCertificateKeyFile /path/to/yourdomain.key: Replace /path/to/yourdomain.key with the path to the private key file you generated when creating the CSR.
  4. SSLCertificateChainFile /path/to/intermediate.crt: If your CA provided an intermediate certificate file (or a bundle), use this directive and replace /path/to/intermediate.crt with the correct path. This helps establish the chain of trust with browsers. If you have a bundle file, you might not need this separate directive, depending on your CA’s instructions.
  5. Save the Configuration File: Save the changes you made to your virtual host configuration file.

Restart Apache

After configuring your virtual host, you need to restart the Apache server for the changes to take effect.

Use the appropriate command for your system:

Debian/Ubuntu: sudo service apache2 restart
CentOS/RHEL: sudo systemctl restart httpd

Test Your SSL/TLS Certificate

Once Apache has restarted, you should test if your SSL/TLS certificate is installed correctly. You can do this by:

Visiting Your Website with HTTPS: Open a web browser and go to https://yourdomain.com. Check if you see the padlock icon in the address bar, indicating a secure connection.

Using an Online SSL Checker: There are many free online tools (like SSL Labs’ SSL Test) that can analyze your website’s SSL/TLS configuration and identify any potential issues.

By following these steps, you should be able to successfully install an SSL/TLS certificate on your Apache server and secure your website with HTTPS. Remember to always keep your server software and SSL/TLS configuration up to date for the best security.

Table of Contents