SSL How to install an ssl certificate?

nah no way to automate this as you need manual steps with the SSL provider as such etc

full guide at http://centminmod.com/nginx_configure_https_ssl_spdy.html

 

Which SSL certificate ?

Different SSL certificates have different file combinations, some listed below and how to create the relevant files for Nginx

» EV/EV SGC SSL
» Root: AddTrustExternalCARoot.crt
» Intermediate 1: COMODOAddTrustServerCA.crt
» Intermediate 2: COMODOExtendedValidationSecureServerCA.crt
» End-Entity/Domain Certificate

» InstantSSL/IntranetSSL/EnterpriseSSL/Unified Communications (UCC)
» Root: AddTrustExternalCARoot.crt
» Intermediate: ComodoHigh-AssuranceSecureServerCA.crt
» End-Entity/Domain Certificate

» ComodoSSL / ComodoSSL Wildcard / ComodoSSL UCC
» Root: AddTrustExternalCARoot.crt
» Intermediate: ComodoSSLCA.crt
» End-Entity/Domain Certificate

» EssentialSSL / Free Certificate
» Root: AddTrustExternalCARoot.crt
» Intermediate 1: UTNAddTrustSGCCA.crt
» Intermediate 2: ComodoUTNSGCCA.crt
» Intermediate 3: EssentialSSLCA_2.crt
» End-Entity/Domain Certificate

» PositiveSSL
» Root: AddTrustExternalCARoot.crt
» Intermediate: PositiveSSLCA2.crt
» End-Entity/Domain Certificate

With http://centminmod.com/nginx_configure_https_ssl_spdy.html

for PositiveSSL

Code:

cat www_yourdomain_com.crt PositiveSSLCA2.crt AddTrustExternalCARoot.crt > ssl-unified.crt
cat PositiveSSLCA2.crt AddTrustExternalCARoot.crt > ssl-trusted.crt

for ComodoSSL / ComodoSSL Wildcard / ComodoSSL UCC

Code:

cat www_yourdomain_com.crt ComodoSSLCA.crt AddTrustExternalCARoot.crt > ssl-unified.crt
cat ComodoSSLCA.crt AddTrustExternalCARoot.crt > ssl-trusted.crt

for EV/EV SGC SSL

Code:

cat www_yourdomain_com.crt COMODOAddTrustServerCA.crt COMODOExtendedValidationSecureServerCA.crt AddTrustExternalCARoot.crt > ssl-unified.crt
cat COMODOAddTrustServerCA.crt COMODOExtendedValidationSecureServerCA.crt AddTrustExternalCARoot.crt > ssl-trusted.crt

 

There seems to be another combination for Comodo SSL certificates as I found out setting up my test site at sslspdy.com - Nginx + Google SPDY/3.1 SSL

• Root CA Certificate - AddTrustExternalCARoot.crt
• Intermediate CA Certificate - COMODOECCAddTrustCA.crt
• Intermediate CA Certificate - COMODOECCDomainValidationSecureServerCA.crt
• Your SSL Certificate - sslspdy_com.crt

So you can setup Centmin Mod Nginx SSL with either one of two configurations with or without root CA as it isn't needed as most browsers already have the root CA and proceed with guide at Nginx HTTPS / SSL Google SPDY configuration

with root CA

Code:

cat sslspdy_com.crt COMODOECCDomainValidationSecureServerCA.crt COMODOECCAddTrustCA.crt AddTrustExternalCARoot.crt > sslspdy.com-unified.crt

cat COMODOECCAddTrustCA.crt COMODOECCDomainValidationSecureServerCA.crt AddTrustExternalCARoot.crt > sslspdy.com-trusted.crt

without root CA

Code:

cat sslspdy_com.crt COMODOECCDomainValidationSecureServerCA.crt COMODOECCAddTrustCA.crt > sslspdy.com-unified.crt

cat COMODOECCAddTrustCA.crt COMODOECCDomainValidationSecureServerCA.crt AddTrustExternalCARoot.crt > sslspdy.com-trusted.crt

 

@nehafarzana unfortunately that SSL certificate is cheap as it's only for single domain + 1 hostname usually www. version of the domain. So you are SSL covered for yourdomain.com and www.yourdomain.com.

For subdomains, you need SSL wildcard certificate to cover yourdomain.com and unlimited *.yourdomain.com subdomains. Of course SSL wildcard certificates are much more expensive.

However, I have plans for premium forum user upgrades which will bundle cheaper standard SSL and SSL wildcard certificates for Centmin Mod premium members SSL Certificates - which do you use and how much ? | Centmin Mod Community Exact details are still being worked on but if you have alot of domains needing SSL, you could end up saving $100s per year in SSL certificate costs

Of course no way as cheap as Namecheap's promo first year US$1.99 offer but cheaper than their renewal costs

 

Just heads up updated How to install an ssl certificate? | Centmin Mod Community as the order of certificates for creating the unified.crt needed fixing

FYI, you can use this online tool to check the order of certificates is configured correctly at SSL Certificate Checker - Check for vulnerabilities like HeartBleed

 

yeah should be similar to setup for Essential

as to slowness depends on how well your server specs are too to handle SSL and make sure you enable SPDY SSL Nginx HTTPS / SSL Google SPDY configuration