How to setup SSL certificate at self hosted server?

Setting up an SSL certificate on a self-hosted server involves several key steps to ensure secure communication over HTTPS. Here’s a comprehensive guide you can follow:

🔐 Step-by-Step Guide to Setting Up SSL on a Self-Hosted Server

1. Choose an SSL Certificate Type

Decide whether you want:

• Self-Signed Certificate (for internal/testing purposes only),

• Free Certificate (e.g., via Let's Encrypt),

• Commercial Certificate (e.g., from DigiCert, GlobalSign, etc. for public-facing domains).

2. Generate a Certificate Signing Request (CSR)

Use OpenSSL or your server’s built-in tools to create a CSR and a private key.

You’ll be prompted to enter information like:

• Country

• State

• Organization

• Common Name (your domain)

3. Purchase or Request the Certificate

• For Let’s Encrypt (free): Use a tool like Certbot.

• For commercial: Submit your CSR to the certificate authority (CA) and download the issued .crt file.

4. Install the SSL Certificate

Place your certificate and private key in a secure directory on your server.

Update your server configuration:

• Apache

• 
• Nginx
• 

• 5. Redirect HTTP to HTTPS (Optional but Recommended)

  Add a redirect in your server configuration to ensure all traffic is secure:

  • Nginx

  • 
  • Apache
  • 

 6. Restart Web Server

7. Verify Installation

Use tools like:

• SSL Labs SSL Test

• curl -Iv https://yourdomain.com

• Browser padlock/HTTPS check

🔧 Tips & Best Practices

• Auto-Renewal (Let's Encrypt): Schedule a cron job for certbot renew.

• Permissions: Make sure your .key file is readable only by the server (e.g., chmod 600).

• Backups: Always back up your .key and .crt files securely.

If you’re running RChilli services or APIs on a self-hosted setup and need SSL for those, it's best to coordinate with support@rchilli.com for compatibility and deployment specifics related to RChilli APIs.