{"id":963,"date":"2021-04-29T13:41:11","date_gmt":"2021-04-29T13:41:11","guid":{"rendered":"https:\/\/dev.sourcecode.sk\/wsczkb\/?post_type=ht_kb&p=963"},"modified":"2021-10-12T14:06:41","modified_gmt":"2021-10-12T12:06:41","slug":"instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2","status":"publish","type":"ht_kb","link":"https:\/\/www.websupport.cz\/podpora\/kb\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\/","title":{"rendered":"Instalace vlastn\u00edho TLS\/SSL certifik\u00e1tu na virtu\u00e1ln\u00ed server s Apache2"},"content":{"rendered":"\n

SSL certifik\u00e1ty<\/strong><\/a> zabezpe\u010duj\u00ed dv\u011b hlavn\u00ed funkce: \u0161ifrov\u00e1n\u00ed datov\u00fdch p\u0159enos\u016f mezi prohl\u00ed\u017ee\u010dem n\u00e1v\u0161t\u011bvn\u00edka a serverem, a potvrzen\u00ed identity provozovatele serveru. <\/p>\n\n\n\n

N\u00e1vod jako v Ubuntu 20.04 LTS nainstalovat Let\u2019s Encrypt TLS\/SSL pro Nginx<\/a> (HTTPS)<\/p>\n\n\n\n

Certifik\u00e1t\u00a0je mo\u017en\u00e9 v prost\u0159ed\u00ed sd\u00edlen\u00e9ho hostingu nainstalovat p\u0159es webov\u00e9 rozhran\u00ed Webadminu (v p\u0159\u00edpad\u011b\u00a0zakoupen\u00ed SSL certifik\u00e1tu u n\u00e1s\u00a0je instalace dokonce pln\u011b automatick\u00e1), toto v\u0161ak neplat\u00ed u\u00a0virtu\u00e1ln\u00edho serveru<\/a>\u00a0– SSL certifik\u00e1ty je nutn\u00e9 instalovat manu\u00e1ln\u011b.<\/p>\n\n\n\n

Kop\u00edrov\u00e1n\u00ed pot\u0159ebn\u00fdch soubor\u016f<\/strong><\/h2>\n\n\n\n

Jako \u00fapln\u00e9 minimum jsou pro spr\u00e1vn\u00e9 fungov\u00e1n\u00ed SSL certifik\u00e1tu nutn\u00e9 dva soubory: soubor priv\u00e1tn\u00edho kl\u00ed\u010de, standardn\u011b s p\u0159\u00edponou .key, a samotn\u00fd certifik\u00e1t (*.crt). <\/strong><\/p>\n\n\n\n

Ve v\u011bt\u0161in\u011b p\u0159\u00edpad\u016f t\u00e9\u017e certifika\u010dn\u00ed autorita (CA) poskytne tzv. intermediate certifik\u00e1t<\/strong>, n\u011bkdy naz\u00fdvan\u00fd t\u00e9\u017e certificate chain<\/strong> nebo bundle<\/strong>. Tento soubor je ve skute\u010dnosti sada certifik\u00e1t\u016f, vypov\u00eddaj\u00edc\u00ed o vztahu certifika\u010dn\u00ed autority, kter\u00e1 v\u00e1m certifik\u00e1t vydala, s jej\u00edmi nad\u0159azen\u00fdmi certifika\u010dn\u00edmi autoritami.<\/p>\n\n\n\n

Soubory na VPS m\u016f\u017eeme nakop\u00edrovat nap\u0159\u00edklad prost\u0159ednictv\u00edm program\u016f WinSCP<\/a> nebo FileZilla<\/a>. Pou\u017eijeme SFTP re\u017eim p\u0159enosu a pro p\u0159ihl\u00e1\u0161en\u00ed pou\u017eijeme rootovsk\u00e9 p\u0159ihla\u0161ovac\u00ed \u00fadaje, kter\u00e9 n\u00e1m byly zaslan\u00e9 p\u0159i vytvo\u0159en\u00ed VPS.
<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Nakop\u00edrujeme *.crt a *.key soubory do adres\u00e1\u0159e \/etc\/ssl\/<domena>\/:<\/strong>
<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

\u00daprava konfigurace Apache2<\/h2>\n\n\n\n

Pro spr\u00e1vn\u00e9 fungov\u00e1n\u00ed SSL certifik\u00e1tu pot\u0159ebujeme upravit nastaven\u00ed Apache webserveru – p\u0159esn\u011bji VHostu dom\u00e9ny, pro kterou byl SSL certifik\u00e1t vydan\u00fd. Tento najdeme ve slo\u017ece \/etc\/apache2\/sites-enabled\/<\/strong>.<\/p>\n\n\n\n

Otev\u0159eme ho v textov\u00e9m editoru. Zaj\u00edmaj\u00ed n\u00e1s n\u00e1sledovn\u00e9 sekce:<\/p>\n\n\n\n

 <VirtualHost *:80>\n \n \n         DocumentRoot \/data\/web\/mojedomena.cz\/web\n \n \n         ServerName mojedomena.cz\n \n \n         ServerAlias www.mojedomena.cz\n \n \n         ErrorLog \/data\/web\/mojedomena.cz\/logs\/error_log\n \n \n         CustomLog \/data\/web\/mojedomena.cz\/logs\/access_log common\n \n \n <\/VirtualHost>\n \n \n <VirtualHost *:80>\n \n \n         VirtualDocumentRoot \/data\/web\/mojedomena.cz\/sub\/%-3\n \n \n         ServerName mojedomena.cz\n \n \n         ServerAlias *.mojedomena.cz\n \n \n         ErrorLog \/data\/web\/mojedomena.cz\/logs\/error_log\n \n \n         CustomLog \/data\/web\/mojedomena.cz\/logs\/access_log common\n \n \n <\/VirtualHost> <\/pre>\n\n\n\n
Tyto sekce v konfigura\u010dn\u00edm souboru zduplikujeme a v jejich nov\u00e9 kopii ud\u011bl\u00e1me drobn\u00e9 zm\u011bny:<\/p>\n\n\n\n
<VirtualHost *:443>\n        DocumentRoot \/data\/web\/mojedomena.cz\/web\n        ServerName mojedomena.cz\n        ServerAlias www.mojedomena.cz\n        ErrorLog \/data\/web\/mojedomena.cz\/logs\/error_log\n        CustomLog \/data\/web\/mojedomena.cz\/logs\/access_log common\n\n\n        SSLEngine on\n        SSLCertificateFile \/etc\/ssl\/mojedomena.cz\/server.crt\n        SSLCertificateKeyFile \/etc\/ssl\/mojedomena.cz\/server.key\n<\/VirtualHost>\n\n\n<VirtualHost *:443>\n        VirtualDocumentRoot \/data\/web\/mojedomena.cz\/sub\/%-3\n        ServerName mojedomena.cz\n        ServerAlias *.mojedomena.cz\n        ErrorLog \/data\/web\/mojedomena.cz\/logs\/error_log\n        CustomLog \/data\/web\/mojedomena.cz\/logs\/access_log common\n\n\n        SSLEngine on\n        SSLCertificateFile \/etc\/ssl\/mojedomena.cz\/server.crt\n        SSLCertificateKeyFile \/etc\/ssl\/mojedomena.cz\/server.key\n<\/VirtualHost><\/pre>\n\n\n\n
V p\u0159\u00edpad\u011b, \u017ee m\u00e1me i intermediate certifik\u00e1t, pou\u017eijeme ho p\u0159id\u00e1n\u00edm n\u00e1sledovn\u00e9ho \u0159\u00e1dku do ka\u017ed\u00e9 z nov\u00fdch sekc\u00ed:<\/p>\n\n\n\n
        SSLCertificateChainFile \/etc\/ssl\/mojedomena.cz\/server.chain.crt<\/pre>\n\n\n\n
Novou konfiguraci otestujeme pomoc\u00ed p\u0159\u00edkazu apache2ctl -t<\/strong> a pokud si na nic nest\u011b\u017euje,  Apache restartujeme pomoc\u00ed apache2ctl restart<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"
SSL certifik\u00e1ty zabezpe\u010duj\u00ed dv\u011b hlavn\u00ed funkce: \u0161ifrov\u00e1n\u00ed datov\u00fdch p\u0159enos\u016f mezi prohl\u00ed\u017ee\u010dem n\u00e1v\u0161t\u011bvn\u00edka a serverem, a potvrzen\u00ed identity provozovatele serveru.  Certifik\u00e1t\u00a0je mo\u017en\u00e9 v prost\u0159ed\u00ed sd\u00edlen\u00e9ho hostingu nainstalovat p\u0159es webov\u00e9 rozhran\u00ed Webadminu (v p\u0159\u00edpad\u011b\u00a0zakoupen\u00ed SSL certifik\u00e1tu u n\u00e1s\u00a0je instalace dokonce pln\u011b automatick\u00e1), toto v\u0161ak neplat\u00ed u\u00a0virtu\u00e1ln\u00edho serveru\u00a0– SSL certifik\u00e1ty je nutn\u00e9 instalovat manu\u00e1ln\u011b….<\/p>\n","protected":false},"author":3,"template":"","format":"standard","meta":{"footnotes":""},"ht-kb-category":[48],"ht-kb-tag":[],"class_list":["post-963","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-vps"],"yoast_head":"\nInstalace vlastn\u00edho TLS\/SSL certifik\u00e1tu na virtu\u00e1ln\u00ed server s Apache2 - Websupport Centrum n\u00e1pov\u011bdy<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.websupport.cz\/podpora\/kb\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\/\" \/>\n<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Instalace vlastn\u00edho TLS\/SSL certifik\u00e1tu na virtu\u00e1ln\u00ed server s Apache2 - Websupport Centrum n\u00e1pov\u011bdy\" \/>\n<meta property=\"og:description\" content=\"SSL certifik\u00e1ty zabezpe\u010duj\u00ed dv\u011b hlavn\u00ed funkce: \u0161ifrov\u00e1n\u00ed datov\u00fdch p\u0159enos\u016f mezi prohl\u00ed\u017ee\u010dem n\u00e1v\u0161t\u011bvn\u00edka a serverem, a potvrzen\u00ed identity provozovatele serveru.  Certifik\u00e1t\u00a0je mo\u017en\u00e9 v prost\u0159ed\u00ed sd\u00edlen\u00e9ho hostingu nainstalovat p\u0159es webov\u00e9 rozhran\u00ed Webadminu (v p\u0159\u00edpad\u011b\u00a0zakoupen\u00ed SSL certifik\u00e1tu u n\u00e1s\u00a0je instalace dokonce pln\u011b automatick\u00e1), toto v\u0161ak neplat\u00ed u\u00a0virtu\u00e1ln\u00edho serveru\u00a0– SSL certifik\u00e1ty je nutn\u00e9 instalovat manu\u00e1ln\u011b....\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.websupport.cz\/podpora\/kb\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\/\" \/>\n<meta property=\"og:site_name\" content=\"Websupport Centrum n\u00e1pov\u011bdy\" \/>\n<meta property=\"article:modified_time\" content=\"2021-10-12T12:06:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.websupport.sk\/support\/app\/uploads\/2019\/01\/Screenshot-from-2014-11-19-16_38_58.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Odhadovan\u00e1 doba \u010dten\u00ed\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minuty\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/kb\\\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\\\/\",\"url\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/kb\\\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\\\/\",\"name\":\"Instalace vlastn\u00edho TLS\\\/SSL certifik\u00e1tu na virtu\u00e1ln\u00ed server s Apache2 - Websupport Centrum n\u00e1pov\u011bdy\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/kb\\\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/kb\\\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.websupport.sk\\\/support\\\/app\\\/uploads\\\/2019\\\/01\\\/Screenshot-from-2014-11-19-16_38_58.png\",\"datePublished\":\"2021-04-29T13:41:11+00:00\",\"dateModified\":\"2021-10-12T12:06:41+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/kb\\\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\\\/#breadcrumb\"},\"inLanguage\":\"cs\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/kb\\\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"cs\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/kb\\\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.websupport.sk\\\/support\\\/app\\\/uploads\\\/2019\\\/01\\\/Screenshot-from-2014-11-19-16_38_58.png\",\"contentUrl\":\"https:\\\/\\\/www.websupport.sk\\\/support\\\/app\\\/uploads\\\/2019\\\/01\\\/Screenshot-from-2014-11-19-16_38_58.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/kb\\\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Instalace vlastn\u00edho TLS\\\/SSL certifik\u00e1tu na virtu\u00e1ln\u00ed server s Apache2\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/#website\",\"url\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/\",\"name\":\"Websupport Centrum n\u00e1pov\u011bdy\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"cs\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Instalace vlastn\u00edho TLS\/SSL certifik\u00e1tu na virtu\u00e1ln\u00ed server s Apache2 - Websupport Centrum n\u00e1pov\u011bdy","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.websupport.cz\/podpora\/kb\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\/","og_locale":"cs_CZ","og_type":"article","og_title":"Instalace vlastn\u00edho TLS\/SSL certifik\u00e1tu na virtu\u00e1ln\u00ed server s Apache2 - Websupport Centrum n\u00e1pov\u011bdy","og_description":"SSL certifik\u00e1ty zabezpe\u010duj\u00ed dv\u011b hlavn\u00ed funkce: \u0161ifrov\u00e1n\u00ed datov\u00fdch p\u0159enos\u016f mezi prohl\u00ed\u017ee\u010dem n\u00e1v\u0161t\u011bvn\u00edka a serverem, a potvrzen\u00ed identity provozovatele serveru.  Certifik\u00e1t\u00a0je mo\u017en\u00e9 v prost\u0159ed\u00ed sd\u00edlen\u00e9ho hostingu nainstalovat p\u0159es webov\u00e9 rozhran\u00ed Webadminu (v p\u0159\u00edpad\u011b\u00a0zakoupen\u00ed SSL certifik\u00e1tu u n\u00e1s\u00a0je instalace dokonce pln\u011b automatick\u00e1), toto v\u0161ak neplat\u00ed u\u00a0virtu\u00e1ln\u00edho serveru\u00a0– SSL certifik\u00e1ty je nutn\u00e9 instalovat manu\u00e1ln\u011b....","og_url":"https:\/\/www.websupport.cz\/podpora\/kb\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\/","og_site_name":"Websupport Centrum n\u00e1pov\u011bdy","article_modified_time":"2021-10-12T12:06:41+00:00","og_image":[{"url":"https:\/\/www.websupport.sk\/support\/app\/uploads\/2019\/01\/Screenshot-from-2014-11-19-16_38_58.png","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_misc":{"Odhadovan\u00e1 doba \u010dten\u00ed":"3 minuty"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.websupport.cz\/podpora\/kb\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\/","url":"https:\/\/www.websupport.cz\/podpora\/kb\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\/","name":"Instalace vlastn\u00edho TLS\/SSL certifik\u00e1tu na virtu\u00e1ln\u00ed server s Apache2 - Websupport Centrum n\u00e1pov\u011bdy","isPartOf":{"@id":"https:\/\/www.websupport.cz\/podpora\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.websupport.cz\/podpora\/kb\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\/#primaryimage"},"image":{"@id":"https:\/\/www.websupport.cz\/podpora\/kb\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\/#primaryimage"},"thumbnailUrl":"https:\/\/www.websupport.sk\/support\/app\/uploads\/2019\/01\/Screenshot-from-2014-11-19-16_38_58.png","datePublished":"2021-04-29T13:41:11+00:00","dateModified":"2021-10-12T12:06:41+00:00","breadcrumb":{"@id":"https:\/\/www.websupport.cz\/podpora\/kb\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\/#breadcrumb"},"inLanguage":"cs","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.websupport.cz\/podpora\/kb\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\/"]}]},{"@type":"ImageObject","inLanguage":"cs","@id":"https:\/\/www.websupport.cz\/podpora\/kb\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\/#primaryimage","url":"https:\/\/www.websupport.sk\/support\/app\/uploads\/2019\/01\/Screenshot-from-2014-11-19-16_38_58.png","contentUrl":"https:\/\/www.websupport.sk\/support\/app\/uploads\/2019\/01\/Screenshot-from-2014-11-19-16_38_58.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.websupport.cz\/podpora\/kb\/instalace-vlastniho-tls-ssl-certifikatu-na-virtualni-server-s-apache2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.websupport.cz\/podpora\/"},{"@type":"ListItem","position":2,"name":"Instalace vlastn\u00edho TLS\/SSL certifik\u00e1tu na virtu\u00e1ln\u00ed server s Apache2"}]},{"@type":"WebSite","@id":"https:\/\/www.websupport.cz\/podpora\/#website","url":"https:\/\/www.websupport.cz\/podpora\/","name":"Websupport Centrum n\u00e1pov\u011bdy","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.websupport.cz\/podpora\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"cs"}]}},"_links":{"self":[{"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb\/963","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/users\/3"}],"version-history":[{"count":3,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb\/963\/revisions"}],"predecessor-version":[{"id":7067,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb\/963\/revisions\/7067"}],"wp:attachment":[{"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/media?parent=963"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb-category?post=963"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb-tag?post=963"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}