How Do I Install an Extended Validation SSL Certificate on Apache (with mod_ssl) and OpenSSL?

Views:

Extended Validation SSL Certificates, also known as EV Certificates, provide the strictest validation requirements to prove to your customers that your site is not fraudulent, and that it's safe to proceed on your website.

Note: Installing the certificate requires you to be able to make changes to Apache's configuration files, and restart the Apache server process. Please ensure you can do this before you continue.

You should have received your certificate from us, a file typically named your_domain_com.crt as well as the CA bundle file containing the intermediate certificates, typically named either dv_chain.txt, ov_chain.txt or ev_chain.txt and downloadable from your SSL control panel.

Follow these instructions to install your certificate:

1. Copy the certificate and CA bundle file to your server, preferably into a directory where you plan to keep your certificates

Note: This is commonly /etc/ssl/.

2. You will now need to edit the Apache configuration file. The location of this file can vary depending on your distribution (Windows, Debian/CentOS/Fedora/etc. Linux) and the version of Apache you are using

3. Locate the file and open it in your preferred editor

4. Locate the VirtualHost section for the ssl-enabled site you are installing the certificate for

Note: This will commonly begin <VirtualHost 127.0.0.1:443>.

5. Add the following lines into the VirtualHost section, making sure to change the paths of the files to correspond to the locations of the files on your server:

Apache 1.3.x

SSLEngine on
SSLCertificateKeyFile /etc/ssl/ssl.key/server.key
SSLCertificateFile /etc/ssl/ssl.crt/yourDomainName.crt
SSLCACertificateFile /etc/ssl/ssl.crt/ Apache_Plesk_Install.txt

Apache 2.x

SSLEngine on
SSLCertificateKeyFile /etc/ssl/ssl.key/server.key
SSLCertificateFile /etc/ssl/ssl.crt/yourDomainName.crt
SSLCertificateChainFile /etc/ssl/ssl.crt/ Apache_Plesk_Install.txt

6. Save changes to your file. Now, you will need to restart Apache. It is sometimes required to stop then start Apache, instead of issuing the 'restart' command for the changes to take effect.
You have now installed your EV SSL Certificate!

Keywords: Apache, mod_ssl, OpenSSL, Install, SSL

How Do I Install an Extended Validation SSL Certificate on Apache (with mod_ssl) and OpenSSL?

Related Articles (1)