How do I setup SSL for the eAnalytics Tag server?
Author Message
kaysak
Registered since:
24.01.2011
Posts:
5
Details of how to set up SSL for the eAnalytics Tag server or apache2 on ubuntu may be different depending on the SSL Certificate Authority you choose.
Make sure that you installed the Apache SSL module:
sudo apt-get install apache2 libapache-mod-ssl
And that this module has been enabled:
sudo a2enmod ssl
I used eat.eanalytics.de for this tutorial. You would have to change this to your actual top level domain:
You will need the files and copy them to the following location - /etc/apache2/cert:
* a certificate file (e.g. eat.eanalytics.de.crt)
* a keyfile - (e.g. eat.eanalytics.de.key) ( in order to prevent the server from asking for the passphrase over and over again you could create a new keyfile without the passphrase (sudo openssl rsa -in eat.eanalytics.de.key -out eat.eanalytics.de.key.nopass)
* you might also need a csr (Certificate Signing Request) file in order to get the certification file
* in some cases you will have to to set the SSL Certificate Authority File (e.g. SSL123_CA_Bundle.pem for a Thawte 123 Certificate)
Although you might also use the apache2 default sites (default, default-ssl) I prefer to create my own sites:
sudo cp /etc/apache2/sites-available/default /etc/apache2/sites-available/eat.eanalytics.de (your top level domain)
sudo cp /etc/apache2/sites-available/default-ssl /etc/apache2/sites-available/eat.eanalytics.de-ssl (your top level domain)
Next you might want to set the domain name - first for the non SSL site:
sudo vi /etc/apache2/sites-available/eat.eanalytics.de
: <VirtualHost eat.eanalytics.de:80>
...
ServerName eat.eanalytics.de:80
...

Then the SSL site has to be configured:
sudo vi /etc/apache2/sites-available/eat.eanalytics.de-ssl
:<IfModule mod_ssl.c>
<VirtualHost eat.eanalytics.de:443>
...
ServerName eat.eanalytics.de:443
...
SSLCertificateFile /etc/apache2/cert/eat.eanalytics.de.crt
SSLCertificateKeyFile /etc/apache2/cert/eat.eanalytics.de.key.nopass
...
SSLCACertificateFile /etc/apache2/cert/SSL123_CA_Bundle.pem
...
I set the ServerName to the subdomain of the SSL certificate and then embedded the certificate file, the key file and the SSL Certificate Authority File.
Now the new sites have to be activated:
sudo a2ensite eat.eanalytics.de
sudo a2ensite eat.eanalytics.de-ssl
And the apache server has to reload its settings:
sudo service apache2 reload
Kind regards,
Kay

Kay Sakkiettibutra,
eAnalytics Development

Icon WatchCurrently online

At the moment there are 0 users online, thereof 0 registered users and 0 guests.

Icon ManOnline users

Icon GraphForum stats

eAnalytics your Web Analytic Solution has 215 registered user, 22 topics and 14 answers. On average 0.02 posts are written per day.