cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Go to solution
Highlighted

I host my own server.

Need help loading the SSL certificate on my Apache server.  Apache server running Joomla version 3.9. Or if you have any type documentation that would help. Please pass it on to me.

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Resolver III
Solution

Re: I host my own server.

You should only need to configure the Apache server.

 

basic instructions are here: https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html

 

You need 2 files - SSLCertificateFile is a text file with the server's (first in the file) and all intermediary certificates (each cert if followed by a cert that signed it). SSLCertificateKeyFile contains the private key.

 

Follow instructions for the:

- basic install

- ciphersuites

.... it seems it doesn't disable obsolete TLS versions:

SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 
that should be enough. You can also do redirect from HTTP -> HTTPS.

 

 

once it works you can play with stapling and the rest. 

 

Dan

 

———

I've worked around (not only) SSL security for over 20 years in enterprises and startups. 

I am now running an HTTPS expiry management service KeyChest.net

View solution in original post

2 REPLIES 2
Highlighted
Resolver III
Solution

Re: I host my own server.

You should only need to configure the Apache server.

 

basic instructions are here: https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html

 

You need 2 files - SSLCertificateFile is a text file with the server's (first in the file) and all intermediary certificates (each cert if followed by a cert that signed it). SSLCertificateKeyFile contains the private key.

 

Follow instructions for the:

- basic install

- ciphersuites

.... it seems it doesn't disable obsolete TLS versions:

SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 
that should be enough. You can also do redirect from HTTP -> HTTPS.

 

 

once it works you can play with stapling and the rest. 

 

Dan

 

———

I've worked around (not only) SSL security for over 20 years in enterprises and startups. 

I am now running an HTTPS expiry management service KeyChest.net

View solution in original post

Highlighted

Re: I host my own server.

Thanks @dc352 

Will try it out when I get the SSL Certificate.