× NETGEAR will be terminating ReadyCLOUD service by July 1st, 2023. For more details click here.
Orbi WiFi 7 RBE973
Reply

Complete guide to install godaddy SSL to your readynas duo

mui_hfz
Guide

Complete guide to install godaddy SSL to your readynas duo

IMPORTANT NOTES: i am not affiliated with godaddy and went through a very painful process of learning the basics of ssh and putty commands and httpd configuration "directives" to enable godaddy certificate for my webserver (apache on readynas duo, last available firmware). this process included crashing of my apache server purely due to my mistake and wrong configuration which resulted in loss of access to frontview. this is the danger of messing with httpd.conf file. i had to backup almost a terabyte of data, reinstall the OS on the readynas device to regain access, and then the below settings worked for me. very important, do the following at your sole risk, I will not be responsible for any data loss. I describe my self as an "informed" newbie in this field. However doing these below steps saved the day. Now I do not see the ugly certificate warning each time i visit my website over https:// (which i host from my readynas duo). Experts please feel free fill in for your comments. thanks to other senior forum members who have posted earlier tutorials, i just wanted to post a complete tutorial for newbies who have zero know how about this process like i had when i started, many many many google searches ago....
😄
I have changed my domain name url for privacy, i will refer it to as coolexample.com.
i also used tips from following earlier post, but they did not work for me, however it seems to have worked for some people:
    http://www.readynas.com/forum/viewtopic.php?t=18251

****************************************************************************************************
TOOLS:
before attempting installing your ssl certificate, you obviously have to have to buy a domain name, dynamic dns service did not workfor me (i have dynamic ip), so i had to subscribe to Standard DNS (http://dyn.com/dns/dyn-standard-dns) worked for me. then i generated the CSR from godaddy and validated my domain using their TXT method. you may copy the generated intermediate and final certificate to one of your shares, eg., Documents. From there you can move them to the right location.

so type following command for example:
cp /c/documents/gd_bundle /etc/ssl/certs
cp /c/documents/coolexample.com.crt /etc/ssl/certs


where gd_bundle.crt is the intermediate certificate and coolexample.com.crt is the purchased SSL certificate

1. enable SSH access, search prior posts
2. PUTTY , google to download for free, can also try ApacheConf PRO, trial version is free. i only used it to view, not make any changes.
"DO NOT" MAKE CHANGES TO OPENSSL.CONF FILE [/etc/ssl/openssl.conf], as may appear from prior posts, it may have worked for them, but didnt for me, got my cue from this webpage from symantec: [https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&id=AR1095]

PUT intermediate certificate "gd_bundle.crt", final certificate "coolexample.com.crt" and key file "coolexample.key", the only 3 files in the folder
"certs"[/etc/ssl/certs], YOU WILL GET THESE FILES FROM GODADDY DURING CSR GENERATION. CSR generation is described on godaddy website:
    [http://support.godaddy.com/help/article/5269/generating-a-certificate-signing-request-csr--apache-2x
using this command:
openssl req -new -newkey rsa:2048 -nodes -keyout yourdomain.key -out yourdomain.csr

[Replace yourdomain with the domain name you're securing. For example, if your domain name is coolexample.com, you would type coolexample.key and coolexample.csr]

WORKING FILE:
/etc/frontview/apache/httpd.conf

------------------------------------------
helpful link for To Install Renewed SSL Certificates and the Intermediate Certificates:

    http://support.godaddy.com/help/article/5349/installing-ssl-certificate--apache-2x

----------------------------------

COMMANDS
COPY cp eg.,
cp etc/ssl/coolexample.key /etc/ssl/certs

MOVE mv eg.,
cp etc/ssl/coolexample.key /etc/ssl/certs

OPEN TEXT EDITOR: vi eg., vi /etc/frontview/apache/httpd.conf
to save changes press esc, then type :wq then hit enter
to exit without saving any changes, hit esc, then type :q! the hit enter
restart server, 1. first kill and then 2. input command [root:~# only means to goto root with cd command first]
1.
root :~# killall apache-ssl

2.
root:~#/usr/sbin/apache-ssl -f /etc/frontview/apache/httpd.conf

****************************************************************************************************
my original httpd.conf file, locate the following directives by scrolling down:

Listen xxx
SSLEngine On
SSLSessionCache dbm:/ramfs/gcache.db
SSLSessionCacheTimeout 600
SSLCACertificatePath /etc/frontview/apache
SSLCertificateFile /etc/frontview/apache/apache.pem


****************************************************************************************************
ONLY changed settings:

  Listen xxx
SSLEngine On
SSLSessionCache dbm:/ramfs/gcache.db
SSLSessionCacheTimeout 600

SSLCertificateFile /etc/ssl/certs/coolexample.com.crt
SSLCertificateKeyFile /etc/ssl/certs/coolexample.key
SSLCertificateChainFile /etc/ssl/certs/gd_bundle.crt

*************************
where xxx is my port, masked for privacy
***********************
save and exit, restart apache server, using above commands. visit your site over https://
i hope this is helpful. i wanted to give back to a community from which i have learned and benefited so much. thanks
*************************
Message 1 of 4
mui_hfz
Guide

Re: Complete guide to install godaddy SSL to your readynas d

Its been a year i have been using the ssl certificate and its been working fine. wanted to update this post with how to install a renewed ssl certificate
1. If you do not re-key your ssl certificate, then you only need the intermediate bundle and the ssl certificate to be donwloaded from the ssl provider. This is all you need from them, you will be offered the option to re-key, not choosing it will take you to next step, ie download the above two files.
2. Then you need to remove the old ssl and intermediate bundle file from
/etc/ssl/certs


first go there using the cd command, type

cd /etc/ssl/certs


next using following commands, remove the old files:
rm /etc/ssl/certs/gd_bundle.crt
rm /etc/ssl/certs/coolexample.com.crt


3. next place your new bundle and ssl certificate in a folder in readynas using your, say, windows explorer (PC users)--in my example i'll use Documents folder
4. copy these files to the certs folder as below:
cp c/Documents/gd_bundle.crt /etc/ssl/certs
cp c/Documents/coolexample.com.crt /etc/ssl/certs

5. next restart server using below two commands after typing cd (to take you to the root from your current folder level /etc/ssl/certs)

cd


killall apache-ssl
/usr/sbin/apache-ssl -f /etc/frontview/apache/httpd.conf
Message 2 of 4
melvsee
Aspirant

Just a post to say THANK YOU VERY MUCH!!

Thank you for your post.

It helped me to get it working after much frustration trying out instructions given elsewhere.

THANK YOU!
Message 3 of 4
mui_hfz
Guide

Re: Complete guide to install godaddy SSL to your readynas d

@melvsee: saw your message today. You are very welcome. Glad my instructions helped someone.
Message 4 of 4
Top Contributors
Discussion stats
  • 3 replies
  • 5869 views
  • 2 kudos
  • 2 in conversation
Announcements