{"id":3366,"date":"2019-01-13T18:13:46","date_gmt":"2019-01-13T17:13:46","guid":{"rendered":"https:\/\/www.websupport.sk\/podpora\/?post_type=ht_kb&p=3366"},"modified":"2020-06-22T13:51:32","modified_gmt":"2020-06-22T11:51:32","slug":"instalacia-ssl-certifikatu-na-virtualny-server","status":"publish","type":"ht_kb","link":"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/","title":{"rendered":"In\u0161tal\u00e1cia vlastn\u00e9ho TLS\/SSL certifik\u00e1tu na virtu\u00e1lny server s Apache2"},"content":{"rendered":"\n

SSL certifik\u00e1ty<\/strong><\/a> zabezpe\u010duj\u00fa dve hlavn\u00e9 funkcie: \u0161ifrovanie d\u00e1tov\u00fdch prenosov medzi prehliada\u010dom n\u00e1v\u0161tevn\u00edka a serverom, a potvrdenie identity prev\u00e1dzkovate\u013ea serveru. <\/p>\n\n\n\n

N\u00e1vod ako v Ubuntu 20.04 LTS nain\u0161talova\u0165 Let\u2019s Encrypt TLS\/SSL pre Nginx<\/a> (HTTPS)<\/p>\n\n\n\n

Certifik\u00e1t je mo\u017en\u00e9 v prostred\u00ed zdie\u013ean\u00e9ho hostingu nain\u0161talova\u0165 cez webov\u00e9 rozhranie Webadminu (v pr\u00edpade zak\u00fapenia SSL certifik\u00e1tu u n\u00e1s je in\u0161tal\u00e1cia dokonca plne automatick\u00e1), toto v\u0161ak neplat\u00ed u virtu\u00e1lneho serveru<\/a> – SSL certifik\u00e1ty je nutn\u00e9 in\u0161talova\u0165 manu\u00e1lne.<\/p>\n\n\n\n

Kop\u00edrovanie potrebn\u00fdch s\u00faborov<\/strong><\/h2>\n\n\n\n

Ako \u00fapln\u00e9 minimum s\u00fa pre spr\u00e1vne fungovanie SSL certifik\u00e1tu nutn\u00e9 dva s\u00fabory: s\u00fabor priv\u00e1tneho k\u013e\u00fa\u010da, \u0161tandardne s pr\u00edponou .key, a samotn\u00fd certifik\u00e1t (*.crt). <\/strong><\/p>\n\n\n\n

Vo v\u00e4\u010d\u0161ine pr\u00edpadov tie\u017e certifika\u010dn\u00e1 autorita (CA) poskytne tzv. intermediate certifik\u00e1t<\/strong>, niekedy naz\u00fdvan\u00fd tie\u017e certificate chain<\/strong> alebo bundle<\/strong>. Tento s\u00fabor je v skuto\u010dnosti sada certifik\u00e1tov hovoriaca o vz\u0165ahu certifika\u010dnej autority, ktor\u00e1 v\u00e1m certifik\u00e1t vydala, s jej nadraden\u00fdmi certifika\u010dn\u00fdmi autoritami.<\/p>\n\n\n\n

S\u00fabory na VPS m\u00f4\u017eme nakop\u00edrova\u0165 napr\u00edklad prostredn\u00edctvom programov WinSCP<\/a> alebo FileZilla<\/a>. Pou\u017eijeme SFTP re\u017eim prenosu a pre prihl\u00e1senie pou\u017eijeme rootovsk\u00e9 prihlasovacie \u00fadaje, ktor\u00e9 n\u00e1m boli zaslan\u00e9 pri vytvoren\u00ed VPS.
<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Nakop\u00edrujme *.crt a *.key s\u00fabory do adres\u00e1ru \/etc\/ssl\/<domena>\/:<\/strong>
<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

\u00daprava konfigur\u00e1cie Apache2<\/h2>\n\n\n\n

Pre spr\u00e1vne fungovanie SSL certifik\u00e1tu potrebujeme upravi\u0165 nastavenia Apache webservera – presnejsie VHostu dom\u00e9ny, pre ktor\u00fa bol SSL certifik\u00e1t vydan\u00fd. Tento n\u00e1jdeme v prie\u010dinku \/etc\/apache2\/sites-enabled\/<\/strong>.<\/p>\n\n\n\n

Otvor\u00edme ho v textovom editore. Zauj\u00edmaj\u00fa n\u00e1s nasledovn\u00e9 sekcie:<\/p>\n\n\n\n


 <VirtualHost *:80>
 
 
         DocumentRoot \/data\/web\/mojadomena.sk\/web
 
 
         ServerName mojadomena.sk
 
 
         ServerAlias www.mojadomena.sk
 
 
         ErrorLog \/data\/web\/mojadomena.sk\/logs\/error_log
 
 
         CustomLog \/data\/web\/mojadomena.sk\/logs\/access_log common
 
 
 <\/VirtualHost>
 
 
 <VirtualHost *:80>
 
 
         VirtualDocumentRoot \/data\/web\/mojadomena.sk\/sub\/%-3
 
 
         ServerName mojadomena.sk
 
 
         ServerAlias *.mojadomena.sk
 
 
         ErrorLog \/data\/web\/mojadomena.sk\/logs\/error_log
 
 
         CustomLog \/data\/web\/mojadomena.sk\/logs\/access_log common
 
 
 <\/VirtualHost> <\/pre>\n\n\n\n
Tieto sekcie v konfigura\u010dnom s\u00fabore zduplikujeme a v ich novej k\u00f3pii sprav\u00edme drobn\u00e9 zmeny:<\/p>\n\n\n\n
<VirtualHost *:443>
        DocumentRoot \/data\/web\/mojadomena.sk\/web
        ServerName mojadomena.sk
        ServerAlias www.mojadomena.sk
        ErrorLog \/data\/web\/mojadomena.sk\/logs\/error_log
        CustomLog \/data\/web\/mojadomena.sk\/logs\/access_log common


        SSLEngine on
        SSLCertificateFile \/etc\/ssl\/mojadomena.sk\/server.crt
        SSLCertificateKeyFile \/etc\/ssl\/mojadomena.sk\/server.key
<\/VirtualHost>


<VirtualHost *:443>
        VirtualDocumentRoot \/data\/web\/mojadomena.sk\/sub\/%-3
        ServerName mojadomena.sk
        ServerAlias *.mojadomena.sk
        ErrorLog \/data\/web\/mojadomena.sk\/logs\/error_log
        CustomLog \/data\/web\/mojadomena.sk\/logs\/access_log common


        SSLEngine on
        SSLCertificateFile \/etc\/ssl\/mojadomena.sk\/server.crt
        SSLCertificateKeyFile \/etc\/ssl\/mojadomena.sk\/server.key
<\/VirtualHost><\/pre>\n\n\n\n
V pr\u00edpade, \u017ee m\u00e1me aj intermediate certifik\u00e1t, pou\u017eijeme ho pridan\u00edm nasledovn\u00e9ho riadku do ka\u017edej z nov\u00fdch sekci\u00ed:<\/p>\n\n\n\n
        SSLCertificateChainFile \/etc\/ssl\/mojadomena.sk\/server.chain.crt<\/pre>\n\n\n\n
Nov\u00fa konfigur\u00e1ciu otestujeme pomocou pr\u00edkazu apache2ctl -t<\/strong> a pokia\u013e sa na ni\u010d nes\u0165a\u017euje,  Apache re\u0161tartujeme pomocou apache2ctl restart<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"
SSL certifik\u00e1ty zabezpe\u010duj\u00fa dve hlavn\u00e9 funkcie: \u0161ifrovanie d\u00e1tov\u00fdch prenosov medzi prehliada\u010dom n\u00e1v\u0161tevn\u00edka a serverom, a potvrdenie identity prev\u00e1dzkovate\u013ea serveru.  Certifik\u00e1t je mo\u017en\u00e9 v prostred\u00ed zdie\u013ean\u00e9ho hostingu nain\u0161talova\u0165 cez webov\u00e9 rozhranie Webadminu (v pr\u00edpade zak\u00fapenia SSL certifik\u00e1tu u n\u00e1s je in\u0161tal\u00e1cia dokonca plne automatick\u00e1), toto v\u0161ak neplat\u00ed u virtu\u00e1lneho serveru – SSL certifik\u00e1ty je nutn\u00e9 in\u0161talova\u0165 manu\u00e1lne….<\/p>\n","protected":false},"author":30,"template":"","format":"standard","meta":{"footnotes":""},"ht-kb-category":[52],"ht-kb-tag":[210,126,363,189],"class_list":["post-3366","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-vps","ht_kb_tag-apache2","ht_kb_tag-ssl","ht_kb_tag-tls","ht_kb_tag-vps"],"yoast_head":"\nIn\u0161tal\u00e1cia vlastn\u00e9ho TLS\/SSL certifik\u00e1tu na virtu\u00e1lny server s Apache2 - Websupport centrum podpory<\/title>\n<meta name=\"description\" content=\"SSL certifik\u00e1ty zabezpe\u010duj\u00fa \u0161ifrovanie d\u00e1tov\u00fdch prenosov medzi prehliada\u010dom n\u00e1v\u0161tevn\u00edka a serverom, a potvrdenie identity prev\u00e1dzkovate\u013ea serveru.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/\" \/>\n<meta property=\"og:locale\" content=\"sk_SK\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"In\u0161tal\u00e1cia vlastn\u00e9ho TLS\/SSL certifik\u00e1tu na virtu\u00e1lny server s Apache2 - Websupport centrum podpory\" \/>\n<meta property=\"og:description\" content=\"SSL certifik\u00e1ty zabezpe\u010duj\u00fa \u0161ifrovanie d\u00e1tov\u00fdch prenosov medzi prehliada\u010dom n\u00e1v\u0161tevn\u00edka a serverom, a potvrdenie identity prev\u00e1dzkovate\u013ea serveru.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/\" \/>\n<meta property=\"og:site_name\" content=\"Websupport centrum podpory\" \/>\n<meta property=\"article:modified_time\" content=\"2020-06-22T11:51:32+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2019\/01\/Screenshot-from-2014-11-19-16_38_58.png\" \/>\n\t<meta property=\"og:image:width\" content=\"633\" \/>\n\t<meta property=\"og:image:height\" content=\"457\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Predpokladan\u00fd \u010das \u010d\u00edtania\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 min\u00faty\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/\",\"url\":\"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/\",\"name\":\"In\u0161tal\u00e1cia vlastn\u00e9ho TLS\/SSL certifik\u00e1tu na virtu\u00e1lny server s Apache2 - Websupport centrum podpory\",\"isPartOf\":{\"@id\":\"https:\/\/www.websupport.sk\/podpora\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2019\/01\/Screenshot-from-2014-11-19-16_38_58.png\",\"datePublished\":\"2019-01-13T17:13:46+00:00\",\"dateModified\":\"2020-06-22T11:51:32+00:00\",\"description\":\"SSL certifik\u00e1ty zabezpe\u010duj\u00fa \u0161ifrovanie d\u00e1tov\u00fdch prenosov medzi prehliada\u010dom n\u00e1v\u0161tevn\u00edka a serverom, a potvrdenie identity prev\u00e1dzkovate\u013ea serveru.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/#breadcrumb\"},\"inLanguage\":\"sk-SK\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"sk-SK\",\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/#primaryimage\",\"url\":\"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2019\/01\/Screenshot-from-2014-11-19-16_38_58.png\",\"contentUrl\":\"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2019\/01\/Screenshot-from-2014-11-19-16_38_58.png\",\"width\":633,\"height\":457},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.websupport.sk\/podpora\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"In\u0161tal\u00e1cia vlastn\u00e9ho TLS\/SSL certifik\u00e1tu na virtu\u00e1lny server s Apache2\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.websupport.sk\/podpora\/#website\",\"url\":\"https:\/\/www.websupport.sk\/podpora\/\",\"name\":\"Websupport centrum podpory\",\"description\":\"Radi v\u00e1m pom\u00f4\u017eeme s va\u0161im probl\u00e9mom\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.websupport.sk\/podpora\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"sk-SK\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"In\u0161tal\u00e1cia vlastn\u00e9ho TLS\/SSL certifik\u00e1tu na virtu\u00e1lny server s Apache2 - Websupport centrum podpory","description":"SSL certifik\u00e1ty zabezpe\u010duj\u00fa \u0161ifrovanie d\u00e1tov\u00fdch prenosov medzi prehliada\u010dom n\u00e1v\u0161tevn\u00edka a serverom, a potvrdenie identity prev\u00e1dzkovate\u013ea serveru.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/","og_locale":"sk_SK","og_type":"article","og_title":"In\u0161tal\u00e1cia vlastn\u00e9ho TLS\/SSL certifik\u00e1tu na virtu\u00e1lny server s Apache2 - Websupport centrum podpory","og_description":"SSL certifik\u00e1ty zabezpe\u010duj\u00fa \u0161ifrovanie d\u00e1tov\u00fdch prenosov medzi prehliada\u010dom n\u00e1v\u0161tevn\u00edka a serverom, a potvrdenie identity prev\u00e1dzkovate\u013ea serveru.","og_url":"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/","og_site_name":"Websupport centrum podpory","article_modified_time":"2020-06-22T11:51:32+00:00","og_image":[{"width":633,"height":457,"url":"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2019\/01\/Screenshot-from-2014-11-19-16_38_58.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Predpokladan\u00fd \u010das \u010d\u00edtania":"3 min\u00faty"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/","url":"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/","name":"In\u0161tal\u00e1cia vlastn\u00e9ho TLS\/SSL certifik\u00e1tu na virtu\u00e1lny server s Apache2 - Websupport centrum podpory","isPartOf":{"@id":"https:\/\/www.websupport.sk\/podpora\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/#primaryimage"},"image":{"@id":"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/#primaryimage"},"thumbnailUrl":"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2019\/01\/Screenshot-from-2014-11-19-16_38_58.png","datePublished":"2019-01-13T17:13:46+00:00","dateModified":"2020-06-22T11:51:32+00:00","description":"SSL certifik\u00e1ty zabezpe\u010duj\u00fa \u0161ifrovanie d\u00e1tov\u00fdch prenosov medzi prehliada\u010dom n\u00e1v\u0161tevn\u00edka a serverom, a potvrdenie identity prev\u00e1dzkovate\u013ea serveru.","breadcrumb":{"@id":"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/#breadcrumb"},"inLanguage":"sk-SK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/"]}]},{"@type":"ImageObject","inLanguage":"sk-SK","@id":"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/#primaryimage","url":"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2019\/01\/Screenshot-from-2014-11-19-16_38_58.png","contentUrl":"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2019\/01\/Screenshot-from-2014-11-19-16_38_58.png","width":633,"height":457},{"@type":"BreadcrumbList","@id":"https:\/\/www.websupport.sk\/podpora\/kb\/instalacia-ssl-certifikatu-na-virtualny-server\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.websupport.sk\/podpora\/"},{"@type":"ListItem","position":2,"name":"In\u0161tal\u00e1cia vlastn\u00e9ho TLS\/SSL certifik\u00e1tu na virtu\u00e1lny server s Apache2"}]},{"@type":"WebSite","@id":"https:\/\/www.websupport.sk\/podpora\/#website","url":"https:\/\/www.websupport.sk\/podpora\/","name":"Websupport centrum podpory","description":"Radi v\u00e1m pom\u00f4\u017eeme s va\u0161im probl\u00e9mom","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.websupport.sk\/podpora\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"sk-SK"}]}},"_links":{"self":[{"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb\/3366","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/users\/30"}],"version-history":[{"count":3,"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb\/3366\/revisions"}],"predecessor-version":[{"id":14655,"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb\/3366\/revisions\/14655"}],"wp:attachment":[{"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/media?parent=3366"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb-category?post=3366"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb-tag?post=3366"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}