Skip to content
June 15, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Watchtower
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Vulnerability Report
Light/Dark Button
  • Home
  • Technique
  • Install & Enable HTTPS on Apache Server
  • Technique

Install & Enable HTTPS on Apache Server

Do Son September 15, 2017 1 minute read

Install & Enable HTTPS on Apache Server

First of all, you need to have a website that can run under http. This tutorial is about Apache2, and other servers may have similar settings.

  1. Get a free SSL certificate.
    Now Let’s Encrypt offers free SSL certificate service. So we need to register an account. Then, after landing you can apply for a free SSL certificate. Finally save the requested certificate locally.
  2. Configure the Apache2 environment
    This will automatically install the SSL plugins required for Apache2.
    sudo a2enmod ssl
    
    sudo a2ensite default-ssl

    Create a default SSL site that will be in /etc/apache2/sites-enabled/ to generate a configuration file.

    In /etc/apache2/creating two folders

    cd /etc/apache2
    
    sudo mkdir ssl.key
    sudo mkdir ssl.crt

    Upload *.crt to ssl.crt folder, upload *.ssl to ssl.key folder.
    Next, we start the configuration default-ssl.conf file

    sudo vim /etc/apache2/sites-enabled/default-ssl.conf

    In which the following attributes are changed

    SSLCertificateFile     /etc/apache2/ssl.crt/2_***.crt
    
    SSLCertificateKeyFile /etc/apache2/ssl.key/3_***.key
    SSLCertificateChainFile /etc/apache2/ssl.crt/1_***.crt

    After the change is successful, restart the Apache2 service

    sudo service apache2 restart

    Finally, try to access https://YourDomain

  3. Enable https by default
    On .htaccess file, add
    RewriteEngine On
    
    RewriteBase /
    RewriteCond %{SERVER_PORT} !^443$
    RewriteRule ^(.*)$ https://YourDomain/ [L]

    After the creation is complete, change /etc/apache2/apache2.conf

    AllowOverride All
  4. Enjoy

Share this article:

Facebook Post LinkedIn Telegram

Related posts:

  1. Firefox prepares to mark all HTTP sites as “Not Secure”
  2. Two sslh Flaws Disclosed: Remote DoS Attacks Possible via Protocol Multiplexer
  3. The End of an Era: Popular CA Buypass to Halt Free TLS/SSL Certificates
  4. Major Shift: Chrome 154 Will Default to “Always Use Secure Connections,” Warning Users Before Insecure HTTP Sites
  5. Riot Games Login Outage Traced to Expired SSL Certificate
Tags: Apache server https

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🔴 Live Critical Threats

  • CVE-2026-12183CVSS 9.8
    Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux...
  • CVE-2026-53609CVSS 9.1
    ApostropheCMS is an open-source Node.js content management system. In versions up to...
  • CVE-2026-53519CVSS 9.1
    Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M...
  • CVE-2026-46716CVSS 9.9
    Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M...
  • CVE-2026-44990CVSS 9.3
    ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a...
  • CVE-2026-28742CVSS 9.8
    Naxclow devices use a uniform request-signing scheme based on a hard-coded, platform-wide...
  • CVE-2026-48558CVSS 10.0
    SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication...
  • CVE-2026-50091CVSS 9.1
    Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so)...
  • CVE-2026-50090CVSS 9.3
    The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect...
  • CVE-2026-50086CVSS 10.0
    The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's...
Powered by CVE WATCHTOWER

Recent Zero-Day Vulnerabilities

  • GreatXML BitLocker Bypass: Public PoC Exploit Disclosed
  • Check Point VPN Vulnerability Exploited in the Wild with Ransomware Links
  • Weekly Threat Intelligence: June 1 to June 7, 2026
  • Cisco SD-WAN Vulnerability Exploited in the Wild with Root RCE Risks
  • Android Zero-Day Flaw Exploited in the Wild: June 2026 Patches Released
  • Exploited in the Wild: Critical OWA Spoofing Flaw (CVE-2026-42897) Hits On-Premises Exchange Servers
Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • Disclaimer
    • Privacy Policy
    • DMCA NOTICE
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.