How to set SSL Certificate

Rehan · 06-08-2018, 03:36 AM

Hello Guyz,
Every web developer knows about the SSL and its importance for their website/blog.Today i am going to show you how to install a SSL certificate on your website/blog for free.Before I start the tutorial i will share some information about the SSL.
What is a SSL Certificate ?
SSL stands for ( secure sockets layer ).A SSL (Secure Sockets Layer) is a standard security technology for establishing an encrypted link between a server and a web browser.This link shows that all the data between the web server and web browser remains secure and private.SSL ( secure sockets layer ) is used for many of the professional company's website for the secure transactions with their customers at online portal.
How to get a SSL Certificate ?
To get a SSL ( secure sockets layer ) connection a web server requires an SSL Certificate. When you choose to activate SSL on your web server you will be prompted to complete a number of questions about the identity of your website and your company. Your web server then creates two cryptographic keys and a Private Key and a Public Key.
SSL certificates are paid.We need to buy a SSL.There are many sites who offer ssl certificates at different prices.But nowadays there are many website who offer a free SSL certificates.
Here are some website which provide free SSL Certificates.
SSL For Free
LetsEncrypt
Here are some paid SSL Providers.
SSLS
GotGetSSL

How to set a SSL Certificate ?
I am going to use a free ssl for my website.So i will get a ssl from SSLFORFree.I have created a website for this tutorial.Check its showing no ssl certificate found.

Code: (Select All)

Your connection is not private

Attackers might be trying to steal your information from ssltut.vc-mpr.net (for example, passwords, messages, or credit cards). Learn more

NET::ERR_CERT_AUTHORITY_INVALID

1st: Click on the upper link or simply visit "sslforfree.com"
2nd: Type your website link at type bar and click " Create SSL Certificate "
3rd: Now website will ask you to very the ownership of the website.There are different methods to verify your site ownership.Automatic FTP Verification, Manual Verification via Uploading file to your website and Manual Verification via DNS by adding a TXT record to your DNS server.
I mostly use manual verification via uploading files because its easy.I tried automatic ftp verification but it always failed to create a verification folders directory.Automatic verification is possible but i prefer Manual verification because its easy then other.
4th: Verify your website using one of the method.I shall click manual verification via uploading file.
Manual Verification

Code: (Select All)

Manually Verify Domain (HTTP Server)

If you do not want to verify website via FTP information then follow the following steps to verify domain ownership manually. The server will need to be on port 80 if HTTP (or port 80 open and forwarding to 443 if HTTPS). If your web server is not listening on port 80 then you will need to temporarily listen on port 80 or forward port 80 to the port for the web server.

In this you have to upload a file in your domain directory.
5th: After reading the information click Manual Verify
Here it will show you explained details about verification and gives you a file link.

Code: (Select All)

Download the following verification files by clicking on each link below 

Link Removed.

Create folder in your domain named ".well-known" if it does not already exist. If you use Windows you may have to add a dot at the end of the folder name in order to create a folder with a dot at the beginning.

Create another folder in your domain under ".well-known" named "acme-challenge" if it does not already exist

Upload the downloaded files to the "acme-challenge" folder

Verify successful upload by visiting the following links in your browser 

http://ssltut.vc-mpr.net/.well-known/acme-challenge/vxpSGiU_Q4A4F-Mu1N-EyF8A1vCpUtNmEKdm_-j6ysg

If the files do not show random alphanumeric characters or shows an error then recheck that you are uploading in the correct place. Also try viewing the page source (Right-click then click "view page source") of the above links to make sure nothing else shows up but the verification file contents. If you use IIS then you may have to change your server config so that files without an extension (or the wildcard MIME type) serves as text/plain. Contact your host if you are unsure.

Click Download SSL Certificate below.

Download The File.
6th: Open your website file manager or a FTP Client and Goto your domain directory.
7th: Create a New Folder with Name " .well-known " ( with dot )
8th: Open the folder " .well-known " and create a subfolder named as " acme-challenge "
9th: Upload the downloaded file in the directory we created. Domain>.well-known>acme-challenge
10 After Uploading the file click the given link on the freessl website.
Verify the file and Click Download SSL
11th: When you click download ssl certificate it will give you the information of ssl certificate.
Something Like This
CRT

Code: (Select All)

Private Key

Code: (Select All)

Certificate Authority Bundle: (CABUNDLE)

Code: (Select All)

Open Your Website Cpanel

Go to the SSL/TLS Section
Here you will find a number of options ( Private Keys, Certificate Signing Request, Certificate, Install/Manage SSL for Your Website )
Click Install/Manage SSL Certificate
Scroll Down in Install a SSL Website Area
Chose your domain name for which you created a SSL certificate.
Put your SSL Certificate Details in every section and Click Install Certificate. Here we are done. Now our site is safe and secure.

Here is the link i used for a SSL Certificate.
https://ssltut.vc-mpr.net

Thanks

chanalku91 · 06-08-2018, 05:29 AM

Hi thanks with your suggestion! It Helps Once Instead of having to get SSL with verification ID / PASSPORT / DLL

**Mashiro** · 06-08-2018, 03:23 PM

@Rehan

I hope that the private key you shared here is just an example key or from a certificate that you have already invalidated. You are free to share the public key but the private key should be kept to yourself and no one else. You shouldn't share the private key! That is about one of the biggest mistakes you can do.

TGX · 06-08-2018, 03:39 PM

(06-08-2018, 03:23 PM)Hidden Refuge Wrote: @Rehan

I hope that the private key you shared here is just an example key or from a certificate that you have already invalidated. You are free to share the public key but the private key should be kept to yourself and no one else. You shouldn't share the private key! That is about one of the biggest mistakes you can do.

He already said that he would be using SSLForFree to get his SSL certification, So that means the Private Key is just an example.

**Mashiro** · 06-08-2018, 03:48 PM

@TGX

I was merely giving a security advice or a tip about something not to do when working with all kind of encryption that is based on asymmetric encryption with private and public keys.

I already noticed that the keys might/are indeed probably just examples because the example URL in that tutorial is not even using a certificate that would be generated from the free or paid services mentioned in this tutorial. It instead uses the free cPanel integrated certificate.

Anyway. Great guide @Rehan.

Rehan · 06-08-2018, 03:57 PM

(06-08-2018, 03:23 PM)Hidden Refuge Wrote: @Rehan

I hope that the private key you shared here is just an example key or from a certificate that you have already invalidated. You are free to share the public key but the private key should be kept to yourself and no one else. You shouldn't share the private key! That is about one of the biggest mistakes you can do.

Of course that is a example.I have mentioned in the thread that the key should be kept private.So i have edited the private keys and have removed some words.

(06-08-2018, 03:48 PM)Hidden Refuge Wrote: Anyway. Great guide @Rehan.

Thanks for your feedback.Your feedback is very important for me.It encourage me to create more useful tutorials.

**Kururin** · 06-09-2018, 07:18 PM

Great guide but instead of this I would suggest letsencrypt as it's much easier to set up and it's all command line. It gives you much better higher security crts and most project now switched to it. Also all browser trusts it. It has a simple tutorial on it's website letsencrypt.org which accommodate all operating system

Login

Options

Sponsors: VirMach - Host4Fun - CubeData - Evolution-Host - HostDare - Hyper Expert - Shadow Hosting - Bladenode - Hostlease - RackNerd - ReadyDedis - Limitless Hosting