Home
»
How to Create an SSL Certificate on Apache on Arch Linux

How to Create an SSL Certificate on Apache on Arch Linux

In today’s digital world, securing your website with an SSL certificate is essential. An SSL (Secure Sockets Layer) certificate encrypts data exchanged between the server and the client, safeguarding sensitive information like passwords, credit card numbers, and personal data. In this blog post, we’ll guide you through the process of creating an SSL certificate on an Apache server running Arch Linux.

Prerequisites

Before you start, ensure you have:

An Arch Linux server with Apache installed.
Root or sudo access to the server.
The mod_ssl module enabled for Apache.

You can install Apache and enable mod_ssl using the following commands:

sudo pacman -Syu apache
sudo a2enmod ssl
sudo systemctl restart httpd

Step 1: Install OpenSSL

OpenSSL is a powerful tool for creating your own SSL certificates. If it’s not already installed on your server, you can install it with:

sudo pacman -S openssl

Step 2: Generate a Private Key

First, you need to generate a private key. This key will be used to create your SSL certificate. Use the following command to generate a 2048-bit RSA private key:

sudo openssl genrsa -out /etc/ssl/private/server.key 2048

Make sure to set appropriate permissions for your private key to keep it secure:

sudo chmod 600 /etc/ssl/private/server.key

Step 3: Generate a Certificate Signing Request (CSR)

Next, create a Certificate Signing Request (CSR). The CSR contains your public key and information about your organization. You can create the CSR with the following command:

sudo openssl req -new -key /etc/ssl/private/server.key -out /etc/ssl/certs/server.csr

You will be prompted to provide several details, including:

Country Name
State or Province Name
Locality Name (City)
Organization Name
Organizational Unit Name
Common Name (e.g., your domain name)
Email Address

Ensure you enter the Common Name correctly as it will be the domain name that the SSL certificate secures.

Step 4: Generate the Self-Signed SSL Certificate

Once you have the CSR, you can generate a self-signed SSL certificate using this command:

sudo openssl x509 -req -days 365 -in /etc/ssl/certs/server.csr -signkey /etc/ssl/private/server.key -out /etc/ssl/certs/server.crt

This command creates a certificate that is valid for 365 days. You can adjust the -days parameter if you need a different validity period.

Step 5: Configure Apache to Use SSL

Now that you have your private key and SSL certificate, it’s time to configure Apache to use SSL. Open your Apache configuration file, which is usually located in /etc/httpd/conf/httpd.conf or you might have a dedicated SSL configuration file in /etc/httpd/conf/extra/httpd-ssl.conf.

Add the following entries to the configuration file:

<VirtualHost *:443>
    ServerName yourdomain.com
    DocumentRoot /var/www/html

    SSLEngine on
    SSLCertificateFile /etc/ssl/certs/server.crt
    SSLCertificateKeyFile /etc/ssl/private/server.key

    <Directory /var/www/html>
        Options Indexes FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>

    ErrorLog /var/log/httpd/ssl_error.log
    CustomLog /var/log/httpd/ssl_access.log combined
</VirtualHost>

Replace yourdomain.com with your actual domain name and ensure DocumentRoot points to your website’s files.

Step 6: Enable the SSL Module and Restart Apache

If you haven’t already, enable the SSL module and restart Apache to apply the changes:

sudo systemctl restart httpd

Step 7: Verify the SSL Certificate

Finally, verify that your SSL certificate is working correctly. You can open a web browser and navigate to https://yourdomain.com. You should see a padlock icon in the address bar, indicating that the connection is secure.

To check the SSL certificate details, you can use:

openssl s_client -connect yourdomain.com:443

Conclusion

Congratulations! You’ve successfully created a self-signed SSL certificate for your Apache server on Arch Linux. While self-signed certificates are suitable for testing or development purposes, it’s important to note that users will see a warning in their browsers. For production environments, consider acquiring a certificate from a trusted Certificate Authority (CA).

For any additional help or if you have questions, feel free to reach out to us at Greenhost.cloud. Remember, securing your website is vital for protecting your data and building trust with your users. Happy hosting!