Apache 2 - SSL certificates page

Setup website to send local CA and server certificates

This required to have a secure web server up and running.


Create dedicated folder

mkdir -p /var/www/myServer/ssl
touch /var/www/myServer/ssl/index.html

Create Web page


   <title>Certificates list</title>

   <h1>Certificates list</h1>

   <h2>Certification Authority</h2>
      Authority of certification:
      <a href="https://serverURL/ssl/cacerts.pem ">root certificate</a>

   <h2>Servers certificates</h2>
   <p>Click on the following links to download sub-servers certificates</p>
        <a href=" https://serverURL/ssl/serverName.p12">my server</a>


Copy files

cp /srv/ssl/cacerts.pem /var/www/myServer/ssl/
cp /srv/ssl/export/serverName.p12 /var/www/myServer/ssl/

Update rights

chown -R www-data:www-data /var/www/myServer/ssl
chmod 755 -R /var/www/myServer/ssl

Installation on client computer

Access SSL page

Go to 'https://myServer/ssl' >> As the certificate is not installed yet you'll see the following alert:

SSL non secure website (1)

Example of alert on Google chrome (click “proceed anyway”)

=>For now this website is presume to be non-secured.

You can also check the URL bar:

SSL non secure website (2)

Download file

Download the Authority of certification file:

SSL download AC

Installation (Google Chrome)

Go to Google Chrome > Settings > Show advanced settings > HTTPS/SSL

Google chrome installation (1)

  • Enable “check for server certificate revocation”
  • Click on manage certificates...

Now you should have a new screen. Click on “Trusted root Certification Authorities” > Import...

Google chrome installation (2)

Choose the file to import (myCA.pem)

  • .pem are not displayed by default, but they can be used
  • Trust the certificates

Do the same for Trusted publisher

Then you should download the server certificate and add it into the "server" tab.

Restart Google Chrome

Check result

After Google Chrome restart, go back to 'https://myServer/ssl'

Notice the URL bar:


Everything is OK now!