Tutorial Install Comodo SSL on Nginx

Tutorial install Comodo SSL, SSL certificates from Comodo free 90 days. This method is not much different from how to create a self-signed SSL certificate on Nginx . Before listing on Comodo should create a Certificate Signing Request (CSR) first so that the time of registration for free Comodo SSL fast.

Related article: List of Free SSL

How to Create a Certificate Signing Request (CSR)

connect via ssh command line, create a new folder, eg ssl (dressing to taste) didirektori / etc / nginx /

mkdir / etc / nginx / ssl
go into the directory you just created is ssl

cd / etc / nginx / ssl
then copy and paste the following command:

openssl req -nodes -newkey rsa: 2048 -keyout babulang_com.key -out babulang_com.csr
the above command will create two pieces of files are babulang_com.key and babulang_com.csr

cursory will generate a 2048 bit private key file which then continues with some questions to answer in making a Certificate Signing Request (CSR) output roughly as follows:

Generating a 2048 bit RSA private key
 .................................. +++
 .. +++
 writing new private key to 'babulang_com.key'
 -----
 You are about to be asked to enter information that will be incorporated
 into your certificate request.
 What you are about to enter is what is called a Distinguished Name or a DN.
 There are quite a few fields but you can leave some blank
 For some fields there will be a default value,
 If you enter '.', The field will be left blank.
 -----
 Country Name (2 letter code) [XX]: ID
 State or Province Name (full name) []: South Lampung
 Locality Name (eg, city) [Default City]: Trump
 Organization Name (eg, company) [Default Company Ltd]: Babulang co.
 Organizational Unit Name (eg, section) []: Sumatra Coffee
 Common Name (eg, your name or your server's hostname) []: babulang.com
 Email Address []: info@babulang.com

Please enter the following 'extra' attributes
 to be sent with your certificate request
 A challenge password []:
 An optional company name []:


If up: A challenge password [] : and An optional company name []: directly enter it.

CSR file is successfully created, Beres. now see .csr file that was created with the command cat :

paint babulang_com.csr
The output is roughly like this:

----- BEGIN CERTIFICATE REQUEST -----
MIIC5TCCAc0CAQAwgZ8xCzAJBgNVBAYTAjYyMRgwFgYDVQQIDA9MYW1wdW5nIFNl
bGF0YW4xETAPBgNVBAcMCEthbGlhbmRhMRAwDgYDVQQKDAdCYWJ1bGFuMRgwFgYD
VQQLDA9TdW1hdGVyYSBDb2ZmZWUxFTATBgNVBAMMDGJhYnVsYW5nLmNvbTEgMB4G
CSqGSIb3DQEJARYRaW5mb0BiYWJ1bGFuZy5jb20wggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyYQwJC7wEE9c + lOVPEyNt4XlY65pjnQsNutM7qaLane + d
IT2G0xBPhzlSl9esE2k6 / 2nze7iu9j3qJEdA7tI90k50l + 17jD + CFkmSnKnNeX4s
nbpUvP8tCJk0FkliIIgbLS // QBL / OT3 + udgDP / mVu74C4gpDcCD2pXVMErkhe0Mh
eDcX ++ VN8kGfnak3ATVWxsN3sKucDBKWtChluRE3ihdxTlwY3UJawQFe7rz / 9 + 06
SboILbcjqg7M0VOGnobfVb + Y8UUV9AOLwmU7jb1SmI9gv7G + fkcS3ieylTR8ASbt
P8BqS6Jg09qwx / EA + MgLJy9KqK9i7yUshwC + nGibAgMBAAGgADANBgkqhkiG9w0B
AQUFAAOCAQEAGmImCb1JDtVkoDInO5E2bX3 + F950Tdue6ZHraWykeKshWGrEWam /
F / Kd6hxuPwXjxbJyiN5qwcvvOElEijiWgoEZPqNDv8aXFqV5vvIpBTafTAsjm8b2
wMm2OmJh8YQnAGANOlY4nPuqNNX4rNJco7jx8eeePVwjEtHdfFh / 3xN7VAqkF3HR
cFPOn6 / MxqTGb20Qe + iZrahteea93ddvhxb51V0tfaU0QbCyx7iynSwaxPtnQzXM
iUvDno4 / 4y19MTKaku9 / zX3nZ3 + zPGjrYQNUtF5LTfT60twQtKUv7mjDNIwAW1j9
+ 1eAk2rxmnFKFGaAb67yKD6F9tvaLhX9Uw ==
----- END CERTIFICATE REQUEST -----
Selection and copy content from the csr that will be pasted into the appropriate fields in the Comodo SSL registration.



 submit CSR

Furthermore, visit the website free Comodo SSL certificate at: https://ssl.comodo.com/free-ssl-certificate.php

click the button Free Trial SSL

Paste CSR in column number one
on the part = 2. Select the server software used to generate the CSR: Nginx
click Next
Furthermore Domain Control Validation will be sent to your registered email at the time of domain registration. follow the instructions in the email.
Complete the contact form, user and password.
click Next


Wait a few minutes until the certificates issued, Comodo will send email with attachments file SSL Certificate and Trust Logo is also the option to install.



How to Install Comodo SSL Certificate

Next inbox? Okay, check the SSL certificate attachment form .ZIP archive files (got my name babulang_com.zip ).

Upload the zip file to the directory / etc / nginx / ssl

Extract

unzip babulang_com.zip
once extracted typically has 4 .crt certificate file, the file name roughly as follows:

AddTrustExternalCARoot.crt
babulang_com.crt
COMODORSAAddTrustCA.crt
COMODORSADomainValidationSecureServerCA.crt
Combine the content of the .crt files into one with the command cat ( concatenate ) with the shell redirection ( > ).

AddTrustExternalCARoot.crt paint babulang_com.crt COMODORSAAddTrustCA.crt COMODORSADomainValidationSecureServerCA.crt> ssl-bundle.crt
Beres, then edit the config Nginx, add the following line into config nginx

        listen 443 ssl;
        server_name babulang.com;
     
        # Reference certificate and private key file
        ssl on;
        ssl_certificate /etc/nginx/ssl/ssl-bundle.crt;
        ssl_certificate_key /etc/nginx/ssl/babulang_com.key;


Reload nginx

nginx -s reload


checks HTTPS

Once the process is fairly boring, time to see the results, check the connection https protocol.

Open favorite browser, try visiting your website with the prefix https: / / if there is a padlock icon in the corner of the address bar green sign successfully installed Comodo SSL certificates.