Set Up SSL Without a Control Panel Print

  • 0

You need SSL for your site but you are not using a control panel then you're missing the easy way to generate the needed files. Its very simply, all you need is bash and openssl. You can generate these files using openSSL on your local machine or on the server itself. I don't think you can do it on windows but you might be able to use the Ubuntu subsystem all the same. OpenSSL comes installed already on Linux and Mac systems and may already be included in Windows Linux subsystem.

You'll want to use OpenSSL commands via bash. First need to generate private KEY which is used to generate CSR. You must hang on to this KEY because it is required and will be matched with the actual Certificate. So after you create the CSR - do not delete the KEY. Keep it safe.

The below command will generate the KEY and CSR. Substitute javapipe_domain with the domain you wish to create SSL for.

openssl req -newkey rsa:2048 -nodes -keyout javapipe-domain.key -out javapipe-domain.csr

It will prompt you with questions. DO NOT set a challenge password. Simply hit enter to skip.

Country Name (2 letter code) []: 
State or Province Name (full name) []:
Locality Name (eg, city) []:
Organization Name (eg, company) []:
Organizational Unit Name (eg, section) []:
Common Name (eg, fully qualified host name) []:  <-- Put the domain you with to use for SSL. Either with www or without.
Email Address []:
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []: <-- SKIP THIS.

You will end up with 2 files javapipe-domain.key and javapipe-domain.csr. You save the key and send the CSR to the certificate authority.

If you lose your key, you will need to either start over or do a reissue which is a waste of time. So make sure you keep that KEY safe!

Was this answer helpful?

« Back