To install the SSL certificate on Nginx server, perform the following:
1. Copy the Certificate files to your server.
Download Geotrust intermediate certificate. Copy the certificate and paste onto plain text editor e.g Notepad or VI and save the file as intermediate.crt
Copy your SSL certificate sent by Geotrust and paste onto plain text editor e.g Notepad or VI and save file as public.crt
2. Concatenate the SSL certificate and intermediate certificate.
You need to concatenate the primary certificate file (public.crt) and the intermediate certificate file (intermediate.crt) into a single pem file by running the following OpenSSL command:
cat intermediate.crt >> public.crt
3. Edit the Nginx virtual hosts file.
Open your Nginx virtual host file for the website you are securing. If you need your site to be accessible through both secure (https) and non-secure (http) connections, you will need a server module for each type of connection. Make a copy of the existing non-secure server module and paste it below the original. Then add the lines in bold below:
server {
listen 443;
ssl on;
ssl_certificate /etc/ssl/your_domain_name.crt;
ssl_certificate_key /etc/ssl/your_domain_name.key;
server_name your.domain.com;
access_log /var/log/nginx/nginx.vhost.access.log;
error_log /var/log/nginx/nginx.vhost.error.log;
location / {
root /home/www/public_html/your.domain.com/public/;
index index.html;
}
}
Adjust the file names to match your certificate files:
ssl_certificate should be your primary certificate combined with the intermediate certificate that you made in the previous step (e.g. public.crt).
ssl_certificate_key should be the key file generated when you created the CSR.
4. Restart Nginx.
-
Run the following command to restart Nginx:
sudo /etc/init.d/nginx restart