Process of SSL Installation Explained

Process of SSL Installation Explained



SSL stands for Secure Socket layer, it provides communication security over the internet. SSL encrypts the data using asymmetric cryptography, symmetric encryption & message authentication codes. All browsers support SSL and many websites use this protocol to obtain confidential information like Credit Card details over the internet. By convention you will need to use https:// instead of http:// in the browser address bar.

Today I am explaining the SSL process and installation of it on Linux Cpanel server .

Note: You will need to have root access of WHM control panel.

First you will need to generate CSR(Certificate Signing Request) in order to buy SSL from Crucial or Certificate Vendor (Geo trust, Rapid SSL or Symantec etc.)

Also you will need to create one of the following email address of the domain which you are getting SSL for. It is required as SSL vendor will email this account and request approval for your SSL order:
[email protected]
[email protected]
[email protected]
[email protected]

To generate a CSR from your control panel, you will need to have following information ready:
1. Email address:  (where certificate is sent)
2. Host to make Cert for: (Domain name with or without www. as prefix)
3. Country: (AU)
4. State: (NSW)
5. City: (Sydney)
6. Company Name: (Crucial)
7. Company Division: (Technical)
8. Email address (displayed in cert)
9. Password
10. Key Size (2048 bits)

Don’t forget to replace the details with your own details.

Note: Double check whether you need SSL for your domain with or without www.

Login into your WHM -> find ‘Generate a SSL certificate & Signing Request’

Fill up all the details and then click create.

It will generate Certificate signing request, Self signed certificate and RSA private Key. You will need to copy Signing Request and Key in a file and save it.

The CSR and Key will look like this:

—–BEGIN CERTIFICATE REQUEST—–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—–END CERTIFICATE REQUEST—–

—–BEGIN RSA PRIVATE KEY—–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—–END RSA PRIVATE KEY—–

After this you can submit the SSL certificate request with SSL Vendor using the generated CSR. Then you will get an approval email request on the above created email address to approve it. It will take 24 hrs to process your SSL request and valid certificate issued.

SSL Certificate requires a dedicated IP address that is unused and not shared with any other domain. So you will need to assign a dedicated IP address (using WHM -> ‘Change Site’s IP Address’) to the domain that you are installing SSL for.

Once you receive valid Certificate from SSL Vendor, Login to your WHM control panel:

Find ‘Install a SSL Certificate and Setup the Domain’ option and then copy the Certificate received from SSL vendor in first box without any white space in the end or beginning.

Then press Tab button on your key board. Rest of the details should be filled automatically and then hit Submit button to install SSL.

You will receive message that its been installed.

You can verify the installation of SSL on this URL:  http://www.sslshopper.com/ssl-checker.html

If you have any issue then you can email to our technical support team : [email protected]



Categories