How to generate and install an SSL certificate on Linode?

Hi,

for one of my clients' domains I am building a website in wordpress and I need an SSL certificate for the same. I am going to get a free SSL certificate from StartSSL (https://www.startssl.com/img/intro.jpg -> first item, top-left corner). I already have another certificate by them which I installed along with ISPConfig on my main personal domain (also on the same Linode).

Do I need a new dedicated IP since I already have one SSL certificate installed? If so where can I get it and what is the price?

Also could anyone please point me to a tutorial as to how I might go about installing the certificate on Ubuntu 14 (x64)? The last time I installed the only other SSL certificate I have (on my main personal domain), it was part of a tutorial on how to install ISPConfig and that bit is too complicated as it includes a lot of other steps relative to ISPConfig installation. Is there a simpler, easier-to-follow resource that might help me?

thanks in advance

2 Replies

Hopefully you got this answered.

In short however: No - you do not need a new IP for additional SSL certificates. Assuming you are using apache you can just load the SSL certificate under the Virtual Service directive. Example below:

ServerName www.yoursite.com

DocumentRoot /var/www/site

SSLEngine on

SSLCertificateFile /path/to/wwwyoursitecom.crt

SSLCertificateKeyFile /path/to/wwwyoursitecom.key

SSLCertificateChainFile /path/to/DigiCertCA.crt

ServerName www.yoursite2.com

DocumentRoot /var/www/site2

SSLEngine on

SSLCertificateFile /path/to/wwwyoursite2com.crt

SSLCertificateKeyFile /path/to/wwwyoursite2com.key

SSLCertificateChainFile /path/to/DigiCertCA.crt

Kind Regards,

David

David Flanigan

Mobile: +1.513.560.8231

E: dave@flanigan.net W: http://www.flanigan.net

That may work for clients that support Server Name Indication - see the apache wiki for details.

If you need to support clients that don't support SNI then you need something like "Subject Alternate Name" in the SSL cert.

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct