{"id":1601,"date":"2022-06-25T18:10:59","date_gmt":"2022-06-25T09:10:59","guid":{"rendered":"https:\/\/jcl.kr:6443\/?p=1601"},"modified":"2022-06-29T13:03:04","modified_gmt":"2022-06-29T04:03:04","slug":"how-to-apply-ssl-certificate-to-raspberry-pi","status":"publish","type":"post","link":"https:\/\/jcl.kr\/?p=1601","title":{"rendered":"How to apply SSL certificate to Raspberry Pi"},"content":{"rendered":"\n

This method is applicable not only to Raspberry Pi but also to Linux.<\/p>\n\n\n\n

This article was written based on apache on Raspbian OS.<\/p>\n\n\n\n

And, for SSL, ZeroSSL, which can be used for free, was used.<\/p>\n\n\n\n

How to get Zero SSL will be organized separately next time.<\/p>\n\n\n\n

First, first save the 3 downloaded ZeroSSL files in the desired path.<\/p>\n\n\n\n

You can either use a command line or use an FTP program.<\/p>\n\n\n\n

Based on ZeroSSL, there are three types of certificate files below.<\/p>\n\n\n\n

ca_bundle.crt<\/p>\n\n\n\n

certificate.crt<\/p>\n\n\n\n

private.key<\/p>\n\n\n\n

I saved it in \/etc\/ssl\/ .<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

I used ‘filezilla’ as the FTP program, and if I just pass it over, permission problems occur, so I gave 777 permission to the ssl directory, copied it, and then changed the permission again.<\/p>\n\n\n\n

grant write permission<\/p>\n\n\n\n

\/etc $ sudo chmod -R 777 ssl<\/p><\/blockquote>\n\n\n\n

After copying, restore permissions<\/p>\n\n\n\n

\/etc $ sudo chmod -R 755 ssl<\/p><\/blockquote>\n\n\n\n

After that, you can edit the configuration file, and there is only one file to modify, and you can edit it using nano or vi as shown below.<\/p>\n\n\n\n

$ sudo nano \/etc\/apache2\/sites-available\/default-ssl.conf<\/p><\/blockquote>\n\n\n\n

After that, you can change the three parts of the file to the path and file name where the above certificate file is stored.<\/p>\n\n\n\n

As shown in the figure below, remove the commented part and replace the three parts with the path where the certificate file is saved.<\/p>\n\n\n\n

SSLCertificateFile \/etc\/ssl\/certificate.crt<\/p>\n\n\n\n

SSLCertificateKeyFile \/etc\/ssl\/private.key<\/p>\n\n\n\n

SSLCertificateChainFile \/etc\/ssl\/ca_bundle.crt<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

After making changes, save them in the order of Control+O -> Enter -> Control+X.<\/p>\n\n\n\n

Then restart apache and everything will be done.<\/p>\n\n\n\n

$ sudo service apache2 restart<\/p><\/blockquote>\n\n\n\n

After that, if you connect with https, you can see that a lock has been created as shown below.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Also, I will post in the next article how to redirect to automatically go to https even when connecting via http.<\/p>\n","protected":false},"excerpt":{"rendered":"

This method is applicable not only to Raspberry Pi but also to Linux. This article was written based on apache on Raspbian OS. And, for SSL, ZeroSSL, which can be…<\/p>\n","protected":false},"author":1,"featured_media":1602,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[108,106,107,49,104,105],"class_list":["post-1601","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-1","tag-apache","tag-https","tag-linux","tag-raspberrypi","tag-ssl","tag-zerossl"],"_links":{"self":[{"href":"https:\/\/jcl.kr\/index.php?rest_route=\/wp\/v2\/posts\/1601","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jcl.kr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jcl.kr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jcl.kr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jcl.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1601"}],"version-history":[{"count":3,"href":"https:\/\/jcl.kr\/index.php?rest_route=\/wp\/v2\/posts\/1601\/revisions"}],"predecessor-version":[{"id":1650,"href":"https:\/\/jcl.kr\/index.php?rest_route=\/wp\/v2\/posts\/1601\/revisions\/1650"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jcl.kr\/index.php?rest_route=\/wp\/v2\/media\/1602"}],"wp:attachment":[{"href":"https:\/\/jcl.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1601"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jcl.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1601"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jcl.kr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1601"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}