cara install root certificate & intermediate certificate di ubuntu 16.04

root certificate dan intermediate nggak harus selalu dipasang, tapi itu tergantung aplikasi yang membutuhkannya juga. misalnya untuk web server kalau pakai apache, root dan intermediatenya itu otomatis, sedangkan kalau pakai nginx setidaknya perlu intermediate certificatenya yang lokasinya didefinisikan pada file konfigurasi.

secara umum urutan sertifikat ssl dalam 1 file adalah seperti ini:

user certificate > intermediate certificate > root certificate

antara -----END CERTIFICATE----- dengan bagian -----BEGIN CERTIFICATE----- untuk intermediate nggak boleh ada whitespace / baris kosong

kalau masing-masing sertifikat masih berupa file terpisah, maka cara menggabungkannya adalah

Code:



cat "/path/to/file/domain.crt" "/path/to/file/intermediate.crt" "/path/to/file/root.crt" > "/path/to/file/fullchain.pem"

Sebagia contohnya punya domain yang pakai letsencrypt untuk sertifikat sslnya:

Spoiler for "sertifikat":

PHP Code:


-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

[ask] cara install root certificate & intermediate certificate di ubuntu 16.04