Renewing the Certificate for RPC Node (Ngnix Server)

in witness-category •  5 years ago  (edited)

The RPC Node https://api.justyy.com is expiring in 5 days.

expiring-certificate.jpg

Nowadays, you can easily get a free SSL certificate but you have to manually/automatically renew it every 90 days.

To apply for a certificate, you have to verify your domain - either by email of your domain, place a file on your server (which can be public accessed), or modify the DNS record.

If your DNS has configured CAA records, you need to remove them or add specific records allowing a SSL provider to issue the certificates on your domain.

Once the certificates are issued, you will see the following files:

certificates.jpg

You need to combine two CRTs into one:

cat certificate.crt ca_bundle.crt >> certificate.crt

Then in Nginx server, add the following in server block:

listen   443;
ssl    on;
ssl_certificate    /etc/ssl/certificate.crt; 
ssl_certificate_key    /etc/ssl/private.key;

Last but not least, restart the nginx server.

sudo /etc/init.d/nginx restart
# or 
sudo service nginx restart

image.png


Every little helps! I hope this helps!

Steem On!~
Reposted to Blog


If you like my work, please consider voting for me, thanks!
https://steemit.com/~witnesses type in justyy and click VOTE



Alternatively, you could proxy to me if you are too lazy to vote!

Also: you can vote me at the tool I made: https://steemyy.com/witness-voting/?witness=justyy

Visit me at: https://steemyy.com

Authors get paid when people like you upvote their post.
If you enjoyed what you read here, create your account today and start earning FREE STEEM!
Sort Order:  
  ·  5 years ago 

Thanks!