How to install SSL certificate on RedHat Linux?

Installing an SSL certificate on RedHat Linux is not difficult and can be finished in just a few steps. This guide will provide easy-to-follow instructions for installing your SSL certificate securely and efficiently on the Red Hat operating system.

The Prerequisites

Complete these prerequisites before you start the installation process.

• You must have access to your server via SSH.
• A valid SSL certificate from a Certificate Authority (CA).
• The Apache HTTP Server installed and configured on RedHat Linux.
• Install the OpenSSL libraries on the server
• Generated CSR

Also Read: How to Generate CSR on Redhat Linux [Manually]?

Step 1: Create the yourdomain.crt file

Open the Primary SSL certificate file in a text editor and copy all its content – from “Begin Certificate” to “End Certificate”. Create a file named ‘yourdomain.crt’ and paste the certificate content into this newly created document.

Step 2: Copy yourdomain.crt on your server

Next, securely transfer the yourdomain.crt file to the directory of your server that stores SSL certificates for a successful installation. (For example, /your-domain/httpd/conf/ssl.crt/.)

You can store the certificate to these location mentioned below.

• You can store all certificates at – /your-domain/httpd/conf/ssl.crt/ location
• Private Key file to /your-domain/httpd/conf/ssl.key/ location
• CA bundle files at /your-domain/httpd/conf/ca-bundle/ location

Step 3: Install your SSL certificate

Open the Virtual Host settings in the httpd.conf file and perform the below steps:

• To ensure the successful installation of your CA-Bundle file; copy & paste the PEM file to each directory where it needs to be saved.
  • Example: /etc/httpd/conf/ssl.crt/.
• Open your httpd.conf file using text editor.
• Add “httpd.conf SSLCACertificateFile /yourdomain/httpd/conf/ssl.crt/ca-chain-pem.txt” to the SSL section.

The updated SSL section of your httpd.conf file will look like this:

SSLCACertificateFile /your-domain /httpd/conf/ssl.crt/ca-chain-pem.txt
SSLCertificateKeyFile /your-domain/httpd/conf/ssl.key/server.key
SSLCertificateFile /your-domain/httpd/conf/ssl.crt/server.crt

Step 4: Save the httpd.conf file and restart your Apache server

• Congratulations! Your website is now secure with SSL.
• Save the Config file & restart Apache server.

Troubleshooting Tips

If you are having trouble installing your SSL certificate on RedHat Linux, below are a few tips that may help:

• Check the Apache configuration file for any errors.
• Get SSL from trusted SSL Certificate Authorities like Comodo, Certera and Sectigo.
• Ensure all the necessary files (domainname_com and certs folder) have the correct permissions.
• Verify that OpenSSL is installed on the server by running this command in SSH: <code>openssl version</code>. If not, install it first.
• All Certificate files CA provides are correctly configured in the same text document.
• Restart Apache to make sure the changes took effect.
• Use SSL Checker Tool to troubleshoot SSL Installation.

FAQs

Q: Does RedHat use OpenSSL?

Yes, RedHat does use OpenSSL. OpenSSL is available on most of their enterprise Linux operating systems, including RHEL and CentOS. Red Hat provides an SSL/TLS library as part of its Enterprise Linux product line, including support for the OpenSSL protocols.

Q: Where are SSL certificates stored in RHEL?

SSL certificates stored in specific directories on the server. Red Hat Enterprise Linux typically stores them in /etc/pki/tls/certs and /etc/pki/tls/private. These locations can be change by configuring the ssl.conf file appropriately. Use this command to locate your SSL certificates in RHEL: $ openssl version -d.