Changes for page How to setup an Nginx reverse proxy and also provide a global X.509 certificate for it

Last modified by Alexandru Pentilescu on 2023/06/25 18:53

From version 10.1

edited by Alexandru Pentilescu
on 2022/06/11 22:55

Change comment: There is no comment for this version

To version 12.1

edited by Alexandru Pentilescu
on 2022/11/13 22:18

Change comment: There is no comment for this version

Summary

Page properties

Content

@@ -238,9 +238,9 @@
  Technically, the ssl_certificate_key should point to your private key file. DO NOT, UNDER ANY CIRCUMSTANCES, GIVE THIS TO ANYONE. This has to be kept private and only you and Nginx should have access to it.
--chain.pem contains your public certificate along with the signature from your certificate authority proving its validity.
++chain.pem contains your public certificate along with the CA's intermediate certificate that signed your certificate.
--fullchain.pem contains everything that chain.pem contains, plus the certificate's authority's own public certificate, signed by a root certificate authority, one that should be recognized by any visitor's web browser.
++fullchain.pem contains everything that chain.pem contains, plus the certificate's authority's own public root certificate, which was used in signing the intermediate certificate mentioned above, one that should be recognized by any visitor's web browser.
  As such, please change these file paths to the 3 files that you will be using from your respective CA. If in doubt, always ask for professional help from a sysadmin!