0

SSL certificate I've had configured for a website hosted in a an nginx server has been expired. I'm trying to renew it. (my CA is godaddy) And I followed (https://www.godaddy.com/help/renewing-your-ssl-certificate-864) to get the renewed files. Now I've two crt files (ffexxxxxxx.crt and gd_bundle-g2-g1.crt) Given below is my nginx conf file.

ssl_certificate ssl/bundle.crt;         
ssl_certificate_key ssl/websitename_private-key.pem;        
ssl_ciphers ECDH+AESGCM:ECDH+AES256:ECDH+AES128:DH+3DES:RSA+3DES:RC4:HIGH:!ADH:!AECDH:!MD5;

My Question is how can I generate a bundle.crt out of the new crt files that I've received when renewing (As I understand there is no need to generate private-key.pem again. Please correct me if I'm wrong)

P.S:- My certification authority is godaddy

0

There is nothing special about a bundle certificate, it is a plain text file with one public key after another, either use your favorite editor or concatenate the files:

 cat fexxxxxxx.crt gd_bundle-g2-g1.crt > bundle.crt

The result will be something like this:

-----BEGIN CERTIFICATE-----
AbEVtQwdpf5pLGkkeB6zpxxxYu7KyJesF12KwvhHhm4qxFYxldBniYUr+WymXU
....
DKqC5JlR3XC321Y9YeRq4VzW9v493kHMB65jUr9TU/Qr6cf9tveCX4XSQRjbgbME
HMUfpIBvFSDJ3gyICh3WZlXi/EjJKSZp4A==
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIEYDCCA0igAwIBAgILBAAAAAABL07hRQwwDQYJKoZIhvcNAQEFBQAwVzELMAkG
...
pOBWYdw9P91nbHZF2krqrhqkYE/Ho9aqp9nNgSvBZnWygI/1h01fwlr1kMbawb30
hag8IyrhFHvBN91i0ZJsumB9iOQct+R2UTjEqUdOqCsukNK1OFHrwZyKarXMsh3o
wFZUTKiL8IkyhtyTMr5NGvo1dbU=
-----END CERTIFICATE-----
  • thanks. I used the cat command and generated the bundle.crt. and restarted the nginx. but it still complains that the certificate is expired when i try to access the webpage. – Asa Nov 26 '15 at 7:50
  • 1
    My Bad..!!!!, my website is hosted using AWS Cloudfront. And I need to update the expired certificate in cloudfront it self. – Asa Nov 26 '15 at 9:02
1

Based on Comodo's nginx support page you can just concatenate the files together using cat or a text editor.

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.