Get an SSL certificate

In order to enable a secure HTTP connection to the server, you need to get an SSL certificate from a Certificate Authority (CA).

Generate a Certificate Signing Request

Before you can request your SSL certificate, you must generate a Certificate Signing Request (CSR) from your server. This request is required when you try to get the certificate from any Certificate Authority such as Godaddy.

The request requires that you provide the following information:

• Common Name: Which for GoDaddy, it means the fully-qualified domain name, or URL, you want to secure. This might be different for another CA.
• Organization: The legally-registered name for your business. If you are enrolling as an individual, enter the certificate requestor's name.
• Organization Unit: If applicable, enter the DBA (Doing Business As) name.
• City or Locality: Name of the city where your organization is registered/located.
• State or Province: Name of the state or province where your organization is located.
• Country: The two-letter International Organization for Standardization (ISO) format country code for where your organization is legally registered.

IMPORTANT: If you provide a challenge phrase when generating the request, the server will prompt for it EVERY TIME it starts.

# cd
# mkdir certificate
# cd certificate
# openssl req -new -newkey rsa:2048 -nodes -keyout yourdomain.key -out yourdomain.csr

When you have completed generating your CSR, cut/copy and paste it into the CSR field on the SSL certificate-request page of the CA.

IMPORTANT NOTE: DO NOT ERASE THE FILES AFTER YOU MAKE THE CERTIFICATE REQUEST, YOU'LL NEED THEM LATER.

References

• Country Codes - ISO 3166
• Generating a Certificate Signing Request - Lighttpd