Ubuntu 24.10

How to Configure SSL for Apache on Ubuntu 24.10

To configure SSL for Apache on Ubuntu 24.10, follow these steps:

Step 1 : Update Your System

Start by updating your package list to ensure all software is up-to-date. Run:

sudo apt update

Step 2 : Verify if OpenSSL is installed on your system:

openssl version

If it's not installed, use the following command:

sudo apt install openssl -y

Step 3 : Generate a self-signed SSL certificate:

sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/example.com.key -out /etc/ssl/certs/example.com.crt

During this process, you'll be prompted to enter information such as the domain name (Common Name) and other optional details.

Step 4 : Create a new virtual host file or edit the default configuration file for your domain (e.g., example.com):

sudo nano /etc/apache2/sites-available/example.com.conf

Add the following configuration:

<VirtualHost *:443>
    ServerName example.com
    DocumentRoot /var/www/example.com

    SSLEngine on
    SSLCertificateFile /etc/ssl/certs/example.com.crt
    SSLCertificateKeyFile /etc/ssl/private/example.com.key

    # Other SSL-related configurations can be added here

    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>

Step 5 : Enable the Apache SSL module:

sudo a2enmod ssl

Step 6 : Enable your SSL site configuration:

sudo a2ensite example.com.conf

Step 7 : Check for syntax errors in your configuration:

sudo apache2ctl configtest

If everything is correct, you'll see:

  
Syntax OK

Step 8 : Restart the Apache service to apply the changes:

sudo systemctl restart apache2

Step 9 : Open your web browser and visit your domain using https://example.com.

You may encounter a warning about the certificate being self-signed. This is normal for self-signed certificates.

Congratulations! You have successfully configured SSL for Apache on Ubuntu 24.10.