Nginx and SSL certificates


Lesha Ppiev

I want to provide ssl support for my website under Nginx.
First, I tried to use a self-signed certificate, but as you know, the browser complains

The current connection cannot be trusted

Second, I tried ordering a free certificate from a reputable certificate authority (symantec.com). But it sends me a certificate of the form:

----- BEGIN CERTIFICATE ----- MIIFhzCCBG + gAwIBAgIQIe7e9lh4GqB0cr9kdPKPbjANBgkqhkiG9w0BAQUFADCB yzELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTAwLgYDVQQL EydGb3IgVGVzdCBQdXJwb3NlcyBPbmx5LiAgTm8gYXNzdXJhbmNlcy4xQjBABgNV BAsTOVRlcm1zIG9mIHVzZSBhdCBodHRwczovL3d3dy52ZXJpc2lnbi5jb20vY3Bz L3Rlc3RjYSAoYykwOTEtMCsGA1UEAxMkVmVyaVNpZ24gVHJpYWwgU2VjdXJlIFNl cnZlciBDQSAtIEcyMB4XDTEzMDcwNTAwMDAwMFoXDTEzMDgwNDIzNTk1OVowgasx CzAJBgNVBAYTAlVBMQ0wCwYDVQQIEwRLeWl2MQ0wCwYDVQQHFARLeWl2MQ0wCwYD VQQKFARVSUlQMRgwFgYDVQQLFA9zeXN0ZW0gYW5hbHlzaXMxOjA4BgNVBAsUMVRl cm1zIG9mIHVzZSBhdCB3d3cudmVyaXNpZ24uY29tL2Nwcy90ZXN0Y2EgKGMpMDUx GTAXBgNVBAMUEGVmaWxpbmcudWlwdi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOq5JajVn8VEINqH6N61f8BwS3M2U9mIcwGt7Q829f + RaYqcF / / + 2 + Zzmv72Hismgo6cu5N / ONtEBpJ69zkDjC9vD3IluCSimtu9CyMfG0z + V4tRr8XxmdMnzSJNs + aBxM +ljODVuYjQ5r2YCsPl / GeVAHn41Qa76m0Efz1 + XgfsmoSxSe hhwBB7upJ1YvalRRvcGFGmqMQFiy2 + 8G / l3gCAuCgt + qniEoyNnOGWArkMm5pNUN v0ciaDr8OTzBCx + RvI5sUA2 + iM4mm7Jl7i9oKO6YvcXhpIBOHQDFuGkF5IEoyKAC 1ioBByqN9OT5UicTY25PddE133WU0gN1cBwXAgMBAAGjggGDMIIBfzAbBgNVHREE FDASghBlZmlsaW5nLnVpcHYub3JnMAkGA1UdEwQCMAAwDgYDVR0PAQH / BAQDAgWg MEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9TVlJUcmlhbC1HMi1jcmwudmVyaXNp Z24uY29tL1NWUlRyaWFsRzIuY3JsMEoGA1UdIARDMEEwPwYKYIZIAYb4RQEHFTAx MC8GCCsGAQUFBwIBFiNodHRwczovL3d3dy52ZXJpc2lnbi5jb20vY3BzL3Rlc3Rj YTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUKBcT ir3WorXcBiy3to7aEGZgbuUwdAYIKwYBBQUHAQEEaDBmMCQGCCsGAQUFBzABhhho dHRwOi8vb2NzcC52ZXJpc2lnbi5jb20wPgYIKwYBBQUHMAKGMmh0dHA6Ly9TVlJU cmlhbC1HMi1haWEudmVyaXNpZ24uY29tL1NWUlRyaWFsRzIuY2VyMA0GCSqGSIb3 DQEBBQUAA4IBAQC4SQgLwIcrsvrdQlEpP3kQFJMtPBeoYPYouMfT /Fa4VtsL8Vxi0YqGY8MGXPeESCqEFSciD8ZTaUvbMqaZe/iBPpsyLBpI2 + aeksJBwMYtRLASCzIG -----END CERTIFICATE-----

But Nginx must be .key and .cer files.

Any suggestions on how to get free certificates (.key and .cer files) from well-known CAs?

Mohammad AbuShady

This is the .cerfile, is the key .keyused to generate this .cerfile , try to remember how to get this .cerfile, you may have generated the key file on the device, then created a certificate signing request .csrfrom it , then uploaded it to get this certificate correct?

You should already have the key file.

Related


Nginx and SSL certificates

Lesha Ppiev I want to provide ssl support for my website under Nginx. First, I tried to use a self-signed certificate, but as you know, the browser complains The current connection cannot be trusted Second, I tried ordering a free certificate from a reputable

Google manages SSL certificates with Nginx Ingress

Eric So I'm setting up multiple GKE clusters and can only use wildcard domain certificates, but my domain is two levels deep so it doesn't work. So now I'm trying to use managed Google hosted certificates, but it seems to only work with GCE ingress, not nginx.

Google manages SSL certificates with Nginx Ingress

Eric So I'm setting up multiple GKE clusters and can only use wildcard domain certificates, but my domain is two levels deep so it doesn't work. So now I'm trying to use managed Google hosted certificates, but it seems to only work with GCE ingress, not nginx.

Google manages SSL certificates with Nginx Ingress

Eric So I'm setting up multiple GKE clusters and can only use wildcard domain certificates, but my domain is two levels deep so it doesn't work. So now I'm trying to use managed Google hosted certificates, but it seems to only work with GCE ingress, not nginx.

Google manages SSL certificates with Nginx Ingress

Eric So I'm setting up multiple GKE clusters and can only use wildcard domain certificates, but my domain is two levels deep so it doesn't work. So now I'm trying to use managed Google hosted certificates, but it seems to only work with GCE ingress, not nginx.

How to allow specific SSL client certificates in Nginx?

Joe White Nginx ssl_client_certificateand ssl_trusted_certificatedirectives can be used to allow client certificates signed by a given authority. But how to allow specific certificates? I want to filter by certificate thumbprint or by certificate authority + c

NGINX uses client certificates (ssl_verify_client)

TDawg I have a weird question, I don't even know how to phrase it, but I tried my best I use laravel forge to manage my SSL via LetsEncrypt. It generates the file: server.crt server.key How to get .pem files from .key and .crt files? Based on that link, I u

Java and SSL certificates

Andy: I'm trying to use Secure Sockets Layer (HTTPS) to connect to a PHP script in Java, but I've found that for maximum security/validity I have to import the SSL certificate used by the website into my application. ..I do not know what to do. If it helps, my

Where are SSL certificates stored?

iOS Monkey I understand how SSL works, but my question is more about the storage of certificates on the client side. To understand the exact context, let's assume I'm writing my own browser. My rendering part will be done by WebKit and the HTTP request handlin

Where are SSL certificates stored?

iOS Monkey I understand how SSL works, but my question is more about the storage of certificates on the client side. To understand the exact context, let's assume I'm writing my own browser. My rendering part will be done by WebKit and the HTTP request handlin

SSL certificates break CSS

Sam Recently purchased an SSL certificate, but the site doesn't seem to be able to load the site CSS. Here is the link https://www.rentpayment.com/ By looking at the console error message this seems to be the problem: <link rel="stylesheet" href="http://www.re

Java and SSL certificates

Andy: I'm trying to use Secure Sockets Layer (HTTPS) to connect to a PHP script in Java, but I've found that for maximum security/validity I have to import the SSL certificate used by the website into my application. ..I do not know what to do. If it helps, my

Pinning SSL certificates with libcurl

SP Miguel Jenner I wonder if this example is enough to provide a way to do certificate pinning with libcurl : http://curl.haxx.se/libcurl/c/cacertinmem.html Because I found out that curl also allows http://curl.haxx.se/libcurl/c/CURLOPT_PINNEDPUBLICKEY.html Si

Certificates returned by free SSL

O. Shekri Raz Today I installed a free ssl certificate on my website and it was easy, but I have some questions about it. FreeSSL returned three files: "private.key", "certificate.crt", "ca_bundle.crt". So there are my questions: 1) Who does this private key b

Where are SSL certificates stored?

iOS Monkey I understand how SSL works, but my question is more about the storage of certificates on the client side. To understand the exact context, let's assume I'm writing my own browser. My rendering part will be done by WebKit and the HTTP request handlin

SSL certificates and links

Eric Sometimes I use elink for web browsing and it happens that some HTTP sites fail to load due to it SSL error. An example is https://www.rust-lang.org , which doesn't load in elink but works fine on other browsers like Chrome and firefox. Checking the https

SSL certificates break CSS

Sam Recently purchased an SSL certificate, but the site doesn't seem to be able to load the site CSS. Here is the link https://www.rentpayment.com/ By looking at the console error message this seems to be the problem: <link rel="stylesheet" href="http://www.re

SSL certificates break CSS

Sam Recently purchased an SSL certificate, but the site doesn't seem to be able to load the site CSS. Here is the link https://www.rentpayment.com/ By looking at the console error message this seems to be the problem: <link rel="stylesheet" href="http://www.re

SSL certificates break CSS

Sam Recently purchased an SSL certificate, but the site doesn't seem to be able to load the site CSS. Here is the link https://www.rentpayment.com/ By looking at the console error message this seems to be the problem: <link rel="stylesheet" href="http://www.re

SSL certificates break CSS

Sam Recently purchased an SSL certificate, but the site doesn't seem to be able to load the site CSS. Here is the link https://www.rentpayment.com/ By looking at the console error message this seems to be the problem: <link rel="stylesheet" href="http://www.re

SSL certificates break CSS

Sam Recently purchased an SSL certificate, but the site doesn't seem to be able to load the site CSS. Here is the link https://www.rentpayment.com/ By looking at the console error message this seems to be the problem: <link rel="stylesheet" href="http://www.re

Uniquely identify SSL certificates

Mamadou I would like to know how to determine that a given file is an SSL certificate. Is the file extension sufficient to determine if the file is a certificate? Maarten Bodewes An SSL certificate is nothing more than an X.509 version 3 certificate with some

SSL certificates and redirects

Arjun Tuli If I'm redirecting a website, does the originating domain need to have an SSL certificate, or does it have the redirected domain, or both? Ian Roberts Both, because redirection is an HTTP level thing, happening inside the SSL envelope. The client ne