Use make-ssl-cert to make your SSL certificate.
make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/ssl/private/zachwolfe.org.crt
Copy this file to /etc/ssl/private/zachwolfe.org.key
and /etc/ssl/certs/zachwolfe.org.crt
.
Modify
/etc/ssl/private/zachwolfe.org.key
to only include the key (as follows):
-----BEGIN CERTIFICATE-----
...key text is here....
-----END RSA PRIVATE KEY-----
Modify
/etc/ssl/certs/zachwolfe.org.crt
to only include the certificate (as follows):
-----BEGIN RSA PRIVATE KEY-----
...certificate text is here....
-----END CERTIFICATE-----
nginx setup:
File /etc/nginx/conf.d/zachwolfe.org.ssl.conf server { listen 443; server_name zachwolfe.org; ssl on; ssl_certificate /etc/ssl/certs/zachwolfe.org.crt; ssl_certificate_key /etc/ssl/private/zachwolfe.org.key; ssl_session_timeout 5m; ssl_protocols SSLv2 SSLv3 TLSv1; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on; location / { root /var/www/; index index.html index.htm; } }
File /etc/nginx/conf.d/zachwolfe.org.conf server { listen 80; server_name zachwolfe.org; access_log /var/log/nginx/zachwolfe.org.access.log; location / { root /var/www/; index index.html index.htm; }