Apache Wisekey SSL Certificate Installation

Apache Wisekey SSL Certificate Installation

If you have not yet created a Certificate Signing Request (CSR) and ordered your certificate on the Wisekey RA platform, see how to generate a OpenSSL CSR for Apache.

Apache Server SSL Certificate Installation

When you have received your Wisekey Apache ssl certificate you are ready to install it on your Apache server.

Copy the Certificate files to your server.

Download your Intermediate Wisekey crt file (wcidasca4.crt) on the following url location: http://public.wisekey.com/crt/, and your SSL Certificate (your_domain_name.crt) files.

  1. Save the primary and intermediate certificates to a folder on the server with the private key.

  2. Open the Apache configuration file in a text editor. Apache configuration files are usually found in /etc/httpd. The main configuration file is usually named httpd.conf. In most cases the <VirtualHost> blocks will be at the bottom of this httpd.conf file. Sometimes you will find the <VirtualHost> blocks in a separate file in a directory like /etc/httpd/vhosts.d/ or /etc/httpd/sites/ or in a file called ssl.conf.

  3. If you need your site to be accessible through both secure (https) and non-secure (http) connections, you will need a virtual host for each type of connection. Make a copy of the existing non-secure virtual host and change the port from port 80 to 443.

  4. Add the lines in bold below.

    <VirtualHost 192.168.0.1:443>
    DocumentRoot /var/www/website
    ServerName www.domain.com
    SSLEngine on
    SSLCertificateFile /etc/ssl/crt/primary.crt
    SSLCertificateKeyFile /etc/ssl/crt/private.key
    SSLCertificateChainFile /etc/ssl/crt/wcidasca4.crt
    </VirtualHost> 
  5. Change the names of the files and paths to match your certificate files:

SSLCertificateFile should be your primary certificate file for your domain name.

SSLCertificateKeyFile should be the key file generated when you created the CSR.

SSLCertificateChainFile should be the intermediate certificate file (if any) that was supplied by Wisekey SA


Save the changes and exit the text editor.

Restart your Apache web server using one of the following commands:

/usr/local/apache/bin/apachectl startssl
/usr/local/apache/bin/apachectl restart




    • Related Articles

    • Exchange 2013 Wisekey SSL Installation

      SSL Certificate Installation for Exchange 2013 If you have not yet created a Certificate Signing Request (CSR) and ordered your certificate, check the CSR creation process first. Please use this tutorial to install your Wisekey SSL UC certificate. ...
    • IIS 8 and IIS 8.5 SSL Wisekey Certificate Installation

      SSL Certificate Installation in Microsoft IIS 8 and IIS 8.5 When you have created a Certificate Signing Request(CSR) and ordered your certificate on our RA platform at the following url link: https://reseller.certifyid.com, you are ready to install ...
    • APACHE CSR Creation

      How to generate a CSR for Apache using OpenSSL Login to your server via your terminal client (ssh). At the prompt, type: openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr where server is the name of your server. This begins ...
    • IIS8, 8.5 SSL Certificates CSR Creation

      How to create a CSR on Windows Server 2012 - IIS 8 and Windows Server 2012 R2 - IIS 8.5 From the Start menu, click or search for Internet Information Services (IIS) Manager and open it. Click on the server name. From the center menu, double-click the ...
    • Import Personal Certificate - Mac

      Go to the place where your file was saved then double click to open it You must enter the password of your certificate Next, enter the password of system account then click on modify Keychain Search Keychain then click on Keychain access View your ...