Setting up a SSL Cert from Comodo

## install-comodo-ssl-cert-for-nginx.rst

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                atomicleads
                / install-comodo-ssl-cert-for-nginx.rst
            
            
              Created
              November 21, 2018 18:33
                — forked from bradmontgomery/install-comodo-ssl-cert-for-nginx.rst
            
              
                Steps to install a Comodo PositiveSSL certificate with Nginx.
              
          
    Setting up a SSL Cert from Comodo

I use Namecheap.com as a registrar, and they resale SSL Certs from a number of other companies, including Comodo.
These are the steps I went through to set up an SSL cert.
Purchase the cert


## gist:08d6567e75a77823e1c157134b29357d
version: '2'

# starts 4 docker containers running minio server instances. Each
# minio server's web interface will be accessible on the host at port
# 9001 through 9004.
services:
  minio1:
    image: minio/minio
    ports:
      - "9000:9000"

## Howto convert a PFX to a seperate .key & .crt file
source: http://www.markbrilman.nl/2011/08/howto-convert-a-pfx-to-a-seperate-key-crt-file/

`openssl pkcs12 -in [yourfile.pfx] -nocerts -out [keyfile-encrypted.key]`

What this command does is extract the private key from the .pfx file. Once entered you need to type in the importpassword of the .pfx file.  This is the password that you used to protect your keypair when you created your .pfx file.  If you cannot remember it anymore you can just throw your .pfx file away, cause you won’t be able to import it again, anywhere!.  Once you entered the import password OpenSSL requests you to type in another password, twice!. This new password will protect your .key file.

Now let’s extract the certificate:

`openssl pkcs12 -in [yourfile.pfx] -clcerts -nokeys -out [certificate.crt]`
	version: '2'

	# starts 4 docker containers running minio server instances. Each
	# minio server's web interface will be accessible on the host at port
	# 9001 through 9004.
	services:
	minio1:
	image: minio/minio
	ports:
	- "9000:9000"
	source: http://www.markbrilman.nl/2011/08/howto-convert-a-pfx-to-a-seperate-key-crt-file/

	`openssl pkcs12 -in [yourfile.pfx] -nocerts -out [keyfile-encrypted.key]`

	What this command does is extract the private key from the .pfx file. Once entered you need to type in the importpassword of the .pfx file. This is the password that you used to protect your keypair when you created your .pfx file. If you cannot remember it anymore you can just throw your .pfx file away, cause you won’t be able to import it again, anywhere!. Once you entered the import password OpenSSL requests you to type in another password, twice!. This new password will protect your .key file.

	Now let’s extract the certificate:

	`openssl pkcs12 -in [yourfile.pfx] -clcerts -nokeys -out [certificate.crt]`