0

I deployed a laravel project to a server (in which I have root access). Then I was asked to install a ssl certificate to that project. But there are some projects that already have installed a ssl certificate in the server.

My question is if I install another ssl certificate (for example: Let's Encrypt's free ssl certificate) only to my new project, does it break other projects' ssl certificates ?

It is first time that I am installing a ssl certificate so I am reading and watching videos, how to install ssl. I am afraid of breaking other working projects.

It will be good if you provide a safe procedure how to install.

Server's OS: Debian,
Webserver: nginx.

I can't communicate with server's administrator!

3
  • That depends entirely on how the server is set up. Why do you say you can't talk to your sysadmin?
    – MechMK1
    Dec 12 '19 at 7:58
  • @MechMK1, sysadmin has gone somewhere so I must do everything myself.
    – Gun Ho
    Dec 12 '19 at 8:11
  • 2
    Given that you have root access, you are the sysadmin now. How are projects separated?
    – MechMK1
    Dec 12 '19 at 8:22
1

First, SSL / TLS is quite an advanced setup. you will need to research how it works and test it on another machine before even attempting to do it on a production machine.

If you have a modern setup, (e.a. you have an SNI aware webserver, and clients.) you can setup multiple TLs certificates, see the NGINX documentations regarding virtual hosts and multiple SSL.

To test with Ceritficates you id not buy, but only use for Testing / Development (ea. NOT PRODUCTION) you can use mkcert or xca.

the last thing I would recommand after you tried your setup on the production server, is to use a service like ssllabs to validate your setup. (do it for ALL domains with TLS in your server)

as a footnote to get a good cipher suite list, try cipherli.st

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.