Alibaba Cloud free Symantec DV SSL certificate application and HTTPS configuration method

Our netizens should have noticed last week that Namecheap merchants can apply for a one-year Comodo SSL certificate for free for projects that currently use Symantec, RapidSSL, Geotrust, and Thawte SSL certificates, because according to Chrome This means that Symantec SSL certificates will no longer be supported. This event opportunity is good for our users who need to use SSL certificates. At least they can use the Comodo SSL certificates that were originally paid for free.

One of the prerequisites for obtaining a Comodo SSL certificate is that we meet the application conditions, which requires that our current domain name is already using Symantec, RapidSSL, Geotrust, and Thawte SSL certificates. If it is not yet in use and does not meet the conditions, the certificate is not acceptable. If you want to get it, it is very simple. Just apply and deploy the Symantec certificate for the domain name/site that you currently need to apply for. For example, Alibaba Cloud provides free Symantec certificates.

In this article, Snail will use the free Symantec certificate provided by Alibaba Cloud to apply for and deploy it to the site, and then refer to the article "Namecheap Free Comodo SSL Certificate Replacement Symantec SSL Application Process" to apply for Namecheap Free Comodo SSL certificate provided by merchants.

First, Alibaba Cloud certificate application address

Alibaba Cloud Certificate Service: https://www.aliyun.com/product/cas

Here we can apply for a free certificate, and if necessary, other paid certificates can also be purchased. For our ordinary individual users, if it can be free, then it is free.

Second, Alibaba Cloud free Symantec application

Here we apply for a free Symantec DV SSL certificate based on our needs and purposes. We can see that it is free for 1 year. If you are sure you need to use it, it is also possible, because the purpose of this article is to apply before applying. Free NC certificate, we don’t care how we use it after applying.

Here we can purchase and pay directly. It is free anyway, just step by step to the end. We do not rule out whether it will be paid or changed in the future. Snail here can only ensure that it is free currently.

Third, complete the Symantec DV SSL data activation

1. Complete information

After submission, we need to complete the information and verify which domain name is used.

Find the certificate list in the Alibaba Cloud backend, and then see that the certificate we are currently applying for has not yet completed the information.

2. Fill in the domain name

3. Complete personal information

While completing personal information, we need to choose the domain name verification method. Here I use DNS, and do not write the email address randomly, it will be used to receive emails.

4. How to generate CSR

Choose how to generate the CSR. Here I use the CSR generated by the system. Click Create and then click Finish. Then we will receive an email asking us to submit a TXT binding to verify domain name ownership. Just follow the prompts to bind.

Fourth, Symantec DV SSL certificate configuration method

After we submit the verification of domain name ownership above, we wait and wait. It usually takes a few minutes to receive a successful email. We can download the certificate package from the Alibaba Cloud certificate list background. After downloading the certificate file package, you can see two files, .pem and .key, which we need to bind to the website configuration.

1. Nginx environment configuration

server {listen 443;server_name website domain name;ssl on;…ssl_certificate certificate file path.pem;ssl_certificate_key certificate file path.key;ssl_session_timeout 5m;ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES: HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;ssl_protocols TLSv1 TLSv1.1 TLSv1.2;ssl_prefer_server_ciphers on;

…}

The configuration is relatively simple. We only need to add a set of 443 port configurations to the Nginx configuration file, and then match the certificate. Make sure the path is not mistaken. Finally, restart nginx to see if an error is reported. If it can be restarted without an error, it means there is no problem.

2. Apache environment configuration

A – Create the cert directory in the Apache installation directory and copy all the downloaded files to the cert directory. If you create a CSR file yourself when applying for a certificate, please place the corresponding private key file in the cert directory and name it 214059953170804.key;

B – Open the httpd.conf file in the conf directory under the apache installation directory, find the following content and remove the "#":

#LoadModule ssl_module modules/mod_ssl.so (If it cannot be found, please confirm whether the openssl plug-in has been compiled)#Include conf/extra/httpd-ssl.conf

C – Open the conf/extra/httpd-ssl.conf file in the apache installation directory (it may also be conf.d/ssl.conf, depending on the operating system and installation method), and look for the following configuration statements in the configuration file:

# Add SSL protocol support protocol and remove the unsafe protocol SSLProtocol TLSv1 TLSv1.1 TLSv1.2# Modify the encryption suite as follows SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL: !aNULL:!MD5:!ADH:!RC4# Certificate public key configuration SSLCertificateFile cert/public.pem# Certificate private key configuration SSLCertificateKeyFile cert/214059953170804.key# Certificate chain configuration, if there is \\'#\\' at the beginning of this attribute characters, please delete SSLCertificateChainFile cert/chain.pem

D – Restart Apache.

Fifth, summary of Alibaba Cloud free Symantec certificate application

1. Alibaba Cloud provides a free 1-year Symantec certificate. If you need to apply for project use or if you need to apply for a NC free certificate, you can apply with Symantec. You can pass it after passing the snail test.

2. The configuration of Symantec certificate is relatively simple. Alibaba Cloud also provides configuration tutorials for corresponding environments, including nginx, apache, IIS, etc.

Recommended site searches: registration query, US website space, Google permanently free server, distribution host, free foreign space, Taiwan server rental, free website application domain name, permanent registration-free cloud server recommendation in mainland China, registered domain name query, Hong Kong Which space is better?