Renewing the Certificate for RPC Node (Ngnix Server)

in #witness-category5 years ago (edited)

The RPC Node https://api.justyy.com is expiring in 5 days.

expiring-certificate.jpg

Nowadays, you can easily get a free SSL certificate but you have to manually/automatically renew it every 90 days.

To apply for a certificate, you have to verify your domain - either by email of your domain, place a file on your server (which can be public accessed), or modify the DNS record.

If your DNS has configured CAA records, you need to remove them or add specific records allowing a SSL provider to issue the certificates on your domain.

Once the certificates are issued, you will see the following files:

certificates.jpg

You need to combine two CRTs into one:

cat certificate.crt ca_bundle.crt >> certificate.crt

Then in Nginx server, add the following in server block:

listen   443;
ssl    on;
ssl_certificate    /etc/ssl/certificate.crt; 
ssl_certificate_key    /etc/ssl/private.key;

Last but not least, restart the nginx server.

sudo /etc/init.d/nginx restart
# or 
sudo service nginx restart

image.png


Every little helps! I hope this helps!

Steem On!~
Reposted to Blog


If you like my work, please consider voting for me, thanks!
https://steemit.com/~witnesses type in justyy and click VOTE



Alternatively, you could proxy to me if you are too lazy to vote!

Also: you can vote me at the tool I made: https://steemyy.com/witness-voting/?witness=justyy

Visit me at: https://steemyy.com

Coin Marketplace

STEEM 0.29
TRX 0.25
JST 0.041
BTC 96613.10
ETH 3370.18
USDT 1.00
SBD 2.39