SSL Certificate Updation - Onsite Clients

SSL Certificate Updation - Onsite Clients

This KB was generated with Volante Technologies in mind as the client has a minor difference in how they update these certificates on their side (Azure Front Door). The certificate validity shows correctly when checking on the browser, however, on the server side we need to update the new certificates manually. If this is not done their system becomes inaccessible which opposes the usual SSL Certificate expiry scenarios. Follow the below steps to resolve the issue:

  1. Get the Certificate File, Key File and Chain File from the client.
  2. Add the above files in the appropriate locations:
    1. SSLCertificateFile / SSLCertificateChainFile - /etc/ssl/certs/<file_name.crt> (grant 644 permission)
    2. SSLCertificateKeyFile - /etc/ssl/private/<file_name.key> (grant 600 permission)
  3. Update the Apache Host Config file.
    1. Add the new directory paths to the above files on /etc/apache2/sites-enabled/orangehrm.conf
  4. Reload Apache Services.
  5. Access the Frontend and confirm Login and Menu Loading
You can use the below tool to verify the validity of the Certificate Files
https://www.sslshopper.com/certificate-decoder.html

You can check the Apache logs using:
tail -f /var/log/apache2/error.log