Prerequisites
Before we dive in, ensure you've already set up your VPS with Apache. Also, make sure your SSL certificate is correctly issued. If you've chosen a certificate from BuyCheapVPS, follow this guide to order and issue your certificate: How to Order SSL Certificate.
Installation Steps
1. Upload SSL Files
Upload the following files to the /etc/ssl/ folder on your server:
domain.tld.crt (Certificate)
domain.tld.key (Private Key)
domain.tld.ca-bundle (CA Bundle)
Note: If you ordered your SSL from BuyCheapVPS, find the Certificate and CA files in the Client Area. The Private Key is generated during the CSR process. If your SSL is from another provider, contact them to get these files.
2. Configure Apache for SSL
Edit the default Apache SSL configuration file:
sudo nano /etc/apache2/sites-available/default-ssl.conf
Under <VirtualHost default:443>, add:
ServerName domain.tld
Update the file paths to match your SSL files:
SSLCertificateFile /etc/ssl/domain.tld.crt
SSLCertificateKeyFile /etc/ssl/domain.tld.key
SSLCertificateChainFile /etc/ssl/domain.tld.ca-bundle
Note: Adjust the file paths if you've stored the SSL files in a different location.
3. Enable SSL in Apache
- Enable the ModSSL module:
sudo a2enmod ssl
- Enable the SSL site configuration:
sudo a2ensite default-ssl
- Restart Apache to apply the changes:
sudo systemctl restart apache2
Done! Your SSL certificate is now installed.
Generating a CSR via Command Line
To generate a CSR, use the following command:
openssl req -new -newkey rsa:2048 -nodes -keyout domain.tld.key -out domain.tld.csr
Then, fill in the details as prompted:
Country Name (2-letter code): LT
State/Province: Lietuva
City: Vilnius
Organization Name: Your Company Name or Full Name (for individuals)
Organizational Unit: IT
Common Name: domain.tld (exact domain name)
Email Address: email@address.com
Challenge Password: (Press ENTER)
Optional Company Name: (Press ENTER)
Your CSR is now ready to be provided to your SSL issuer. The Private Key file has also been generated, which you’ll need during the SSL installation.
