Renewal of an SSL


Apache Configuration

Here is the apache conf where we set up where the SSL cert is to be stored.

/etc/apache2/sites-enabled/www.mnutickets.com.ssl.conf

SSLCertificateFile /etc/apache2/certs/nutickets.com.crt

SSLCertificateKeyFile /etc/apache2/certs/nutickets.com.key

SSLCACertificateFile /etc/apache2/certs/ca.crt


Certificate Files required

The three files need to be updated.

SSLCertificate - is the certificate for the domain and starts with:

-- -- -BEGIN CERTIFICATE-- -- -

SSLCertificateKey - is the private key used to generate the certificate and start with:

-- -- -BEGIN PRIVATE KEY-- -- -

SSLCACertificate - The ca.crt is a certificate for the SSL provider and may remain the same

if the same SSL provider is used, though always check this.


Current 2016 to 2019 Wilcard nuTickets.com SSL Cert

The current wildcard multi domain certificate is held at..

https://drive.google.com/drive/u/1/folders/0Bx6Ss2tbl_whQ0Jac3Rick4yNHM

The SSL was order from https://cheapsslsecurity.co.uk/

Note - Attempting to install this Certificate on the www.nutickets.com website (front facing

website) caused a key mismatch error and failed to load - I do not know if wildcard makes

any difference, but it looked like we may have the wrong private key stored for this

certificate.

Note - this is an Essentials SSL - the cheapest - but looking on the website, it does not

claim to support mobile and so we may have issues in the future. We should have bought

an Essentials Certificate that does have the mobile support.


Current 2017 to 2018 www.nutickets.com SSL Cert

Since the wildcard cert did not install; then I ordered a new one just for the front facing

website that installed no problems

The process of ordering a cert requires a request file and private key to be generated.

These files are both held in the DevOps/SSL/www.nutickets.com folder