SSL Certs & Security

Steps for getting a Cert

1. Goto servicenow.llnl.gov and submit a request for getting a SSL certificate
2. This will start the process of getting you a digicert account
3. Do the CSR stuff for generating the server.key file.

Installing the Certs on your Server

1. Once you have the certs downloaded from digicert, you can copy them to the server.
2. sudo vi /etc/nginx/conf.d/default.conf
3. Add the following:

4. The files listed above should be inside the cert.zip you got from digicert, except for the *.key file which you created in the CSR creation process.
5. sudo systemctl restart nginx

Testing and debugging your cert:

If your cert has some error or other issue, you can use the following URL: https://www.digicert.com/help/

How to Redirect to HTTPS

If you are hosting the website within an EC2, you can utilize an application load balancer (ALB). You can find some documentation here: https://repost.aws/knowledge-center/elb-redirect-http-to-https-using-alb