How to enabling SSL in NGINX server.

Why is this note important?

1. Unsecure Warning: When your site is accessible via http://yourdomain.com without SSL, browsers will display a "Not Secure" warning, which can deter users from visiting your site.
2. Data Security: SSL certificates encrypt data between the server and users, preventing sensitive information like passwords or credit card details from being intercepted by attackers.
3. SEO Benefits: Search engines like Google favor HTTPS websites, giving them a ranking boost compared to non-secure HTTP sites.
4. Trust and Credibility: Having an SSL certificate builds trust with users by showing the padlock symbol next to your domain, indicating your site is secure.

Setting up SSL in Nginx with a purchased certificate is straightforward.

Here’s a step-by-step guide:

1. Upload SSL Certificate and Key
2. You should have your certificate files, usually a .crt or .pem for the certificate.
3. Private Key file for the private key.
4. And other .crt files.
5. Upload these files to your server, preferably to /etc/nginx/ssl/ (you might need to create this directory).

scp -i /local/user/ssh SSL_DV_IntermediateCA_2.crt user@ip-address.compute-1.amazonaws.com:~/

1. Combine these files into 1 file i.e fullchain.pem using text editor
2. DOMAIN.COM.crt
3. SSL_DV_IntermediateCA_2.crt
4. SSL_DV_IntermediateCA_3.crt

you can copy combine
-----BEGIN CERTIFICATE-----
[Your domain certificate content]
-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----
[Intermediate certificate content from IntermediateCA_2.crt]
-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----
[Intermediate certificate content from IntermediateCA_3.crt]
-----END CERTIFICATE-----

1. Now you have /etc/nginx/ssl
2. fullchain.pem
3. yourdomain.com.key

/etc/nginx/ssl/fullchain.pem
/etc/nginx/ssl/yourdomain.com.key

1. Update Your Nginx Configuration
2. Open your Nginx configuration file for your domain. It might be something like /etc/nginx/sites-available/yourdomain.com or /etc/nginx/nginx.conf.
3. Inside the file, add the following:

nginx
Copy code
server {
    listen 443 ssl;
    server_name yourdomain.com www.yourdomain.com;

    ssl_certificate /etc/nginx/ssl/fullchain.pem;
    ssl_certificate_key /etc/nginx/ssl/yourdomain.com.key;

    location / {
        # Your site's configuration
        try_files $uri $uri/ =404;
    }
}

# Redirect HTTP to HTTPS
server {
    listen 80;
    server_name yourdomain.com www.yourdomain.com;
    return 301 https://$host$request_uri;
}

1. Test Nginx Configuration
2. Before restarting Nginx, test your configuration to ensure there are no errors:

sudo nginx -t

1. Restart Nginx
2. Once everything is good, restart Nginx to apply the changes:

sudo systemctl restart nginx

1. Verify the SSL
2. Visit your website at https://yourdomain.com to check if the SSL certificate is correctly applied.

And that’s it! Your Nginx server should now be running with SSL enabled. Let me know if you encounter any issues!

#nginx #ssl #https #knowledgesharing