Documentation / Tutorials / Server
Updating COMODO SSL certificate with nginx and Easyengine
/ Server / Updating COMODO SSL certificate with nginx and Easyengine
Here are the steps you can follow to setup/update COMODO SSL certificate in a Nginx server setup using easyengine.
- After you buy the certificate you will receive a zip file and a key file in the format of domain.name.key and domain_name.zip. Extract the zip file, it will have following files
- AddTrustExternalCARoot.crt
- COMODORSAAddTrustCA.crt
- COMODORSADomainValidationSecureServerCA.crt
- yourdomain.com.crt
- You need to make a bundle of these files into one crt file.
- To do that open yourdomain.com.crt file in a notepad and save as 'bundle.crt'
- Then open each of the files, copy everything in them and append it to the bundle.crt file.
- Now create a 'cert' in your /var/www/yourdomain.com/ directory on the server.
- Move both yourdomain.key and bundle.crt file to cert folder.
- Edit ssl.conf file in /var/www/yourdomain.com/conf/nginx/ directory.
listen 443 ssl http2; ssl on; ssl_certificate /var/www/yourdomain.com/cert/bundle.crt; ssl_certificate_key /var/www/yourdomain.com/cert/yourdomain.com.key;
- Now restart Nginx and you are done.
service nginx restart
To validate if everything is setup properly you can go to https://comodosslstore.com/ssltools/ssl-checker.php and put your domain name and check. In case you make any mistake make sure you have followed step 2, 3 and 4 properly.
You may receive java.security.cert.CertPathValidatorException when setting SSL certificate, it only means that your Intermediate/Chain certificate is missing, again the solution to this is to make sure you have followed step 2, 3 and 4 properly.