Monday, May 21, 2012

StartSSL and Nginx

I recently got a signed SSL certificate for my personal web site for free from StartSSL. In order for most browsers to accept the site and not produce SSL warning messages, an intermediate CA certificate must be added. StartSSL has info for web server software, but not nginx.

I found a blog post that presented a very easy solution. Find the file that Nginx is serving from the "ssl_certificate" directive, and run the following commands on it (where "ssl.crt" is your certificate)
curl http://www.startssl.com/certs/sub.class1.server.ca.pem >>ssl.crt
curl http://www.startssl.com/certs/ca.pem >>ssl.crt

Restart Nginx, and you're ready to go!

No comments:

Post a Comment