the host installed the certificate according to your instructions:
1. Link a new domain name manage.kyrrex.com
2. Connect a new certificate
- Attached is a security certificate for the new name manage.kyrrex.com
( IP address for the name is registered
http://prntscr.com/n0f5hx )
3. You need to write a step-by-step instruction for installing an SSL certificate (not from Let's Encrypt) on the CRM server (to replace it when it expires)
1. Domain name changed
https://manage.kyrrex.com/dashboard/2. Certificate installed;
3. Theory:
https://ssl.com.ua/faq/how-to-install-ssl-nginx.htmlAlso on the server:
- Copy the certificate files to the server
(in our case files: manage_kyrrex_com.ca-bundle manage_kyrrex_com.crt manage_kyrrex_com.key to /etc/nginx/ssl folder)
- We connect the certificate with the chain of certificates (ca-bundle.crt) (after combining the manage_kyrrex_com.ca-bundle files, we no longer need it):
using the UNIX cat command:
cat manage_kyrrex_com.ca-bundle >> manage_kyrrex_com.crt
- Edit the Nginx virtual host file, add new files to ssl_certificate and ssl_certificate_key:
/etc/nginx/sites-enabled/kyrrex.crm-onebox.com.vhost
ssl_certificate /etc/nginx/ssl/manage_kyrrex_com.crt;
ssl_certificate_key /etc/nginx/ssl/manage_kyrrex_com.key;
check config for errors
nginx -t
if everything is OK, re-read the systemctl reload nginx config
or restart systemctl restart nginx
If we name the new files as old ones and replace the old ones with new ones, then the config can not be edited.