{"id":1168,"date":"2015-01-17T20:47:21","date_gmt":"2015-01-17T19:47:21","guid":{"rendered":"https:\/\/www.fanjoe.be\/?p=1168"},"modified":"2016-12-17T22:50:22","modified_gmt":"2016-12-17T21:50:22","slug":"nginx-chiffrement-https-et-ssl-via-une-autorite-de-certification-reconnue","status":"publish","type":"post","link":"https:\/\/www.fanjoe.be\/?p=1168","title":{"rendered":"Nginx : Chiffrement HTTPS et SSL via une Autorit\u00e9 de Certification reconnue"},"content":{"rendered":"<p><strong>Edit 2016-12-17 :<\/strong><\/p>\n<p>Suite aux probl\u00e8mes rencontr\u00e9s par StartSSL, j&rsquo;ai publi\u00e9 <a href=\"https:\/\/www.fanjoe.be\/?p=2266\">un nouveau billet<\/a> d\u00e9crivant la marche \u00e0 suivre pour utiliser des certificats g\u00e9n\u00e9r\u00e9s par Let&rsquo;s Encrypt.<\/p>\n<hr \/>\n<p><a href=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-00.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-1183\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-00.jpg\" alt=\"StartSSL-14\" width=\"620\" height=\"74\" \/><\/a><\/p>\n<p>Dans un <a title=\"Nginx : Chiffrement HTTPS et SSL\" href=\"https:\/\/www.fanjoe.be\/?p=1130\" target=\"_blank\">r\u00e9cent billet<\/a>, j&rsquo;avais d\u00e9taill\u00e9 la marche \u00e0 suivre pour utiliser un certificat auto-sign\u00e9 sur un serveur Nginx utilisant HTTPS et SSL.<\/p>\n<p>Cette proc\u00e9dure avait l&rsquo;inconv\u00e9nient majeur d&rsquo;afficher un <a title=\"Message d'alerte\" href=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/SSL-HTTPS-02.png\" target=\"_blank\">tr\u00e8s vilain message d&rsquo;alerte<\/a> \u00e0 l&rsquo;attention de l&rsquo;utilisateur l&rsquo;informant de la possibilit\u00e9 d&rsquo;\u00eatre en pr\u00e9sence d&rsquo;un site malveillant.<\/p>\n<p>En effet, le certificat n&rsquo;\u00e9tant pas sign\u00e9 par une autorit\u00e9 reconnue, le navigateur ne pouvait pas garantir la s\u00e9curit\u00e9 du site \u00e0 l&rsquo;utilisateur.<\/p>\n<p>Pour rem\u00e9dier \u00e0 ce probl\u00e8me, nous allons passer par une Autorit\u00e9 de Certification (CA) pour signer notre certificat.<\/p>\n<p>Il en existe de nombreuses, mais leurs services sont g\u00e9n\u00e9ralement payants. Nous allons ici d\u00e9tailler la proc\u00e9dure pour obtenir un certificat de base gratuit chez <a title=\"StartSSL\" href=\"http:\/\/www.startssl.com\/\" target=\"_blank\">StartSSL<\/a>.<\/p>\n<p><!--more--><\/p>\n<p><em><strong>Inscription<\/strong><\/em><\/p>\n<p>Tout d&rsquo;abord, nous allons nous rendre sur le site <a title=\"StartSSL\" href=\"http:\/\/startssl.com\" target=\"_blank\">StartSSL<\/a> et remplir le formulaire d&rsquo;inscription :<\/p>\n<p><a href=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-01.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-1732\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-01-620x536.png\" alt=\"StartSSL-01\" width=\"620\" height=\"536\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-01-620x536.png 620w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-01-175x151.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-01-300x259.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-01.png 1263w\" sizes=\"auto, (max-width: 620px) 100vw, 620px\" \/><\/a><\/p>\n<p>Cette \u00e9tape peut prendre plusieurs heures car la validation se fait manuellement par une personne qui v\u00e9rifiera la coh\u00e9rence des donn\u00e9es.<\/p>\n<p>Lorsque ce sera fait, vous recevrez un mail contenant un code. Proc\u00e9dez alors aux \u00e9tapes suivantes :<\/p>\n\n\t\t<style>\n\t\t\t#gallery-1 {\n\t\t\t\tmargin: auto;\n\t\t\t}\n\t\t\t#gallery-1 .gallery-item {\n\t\t\t\tfloat: left;\n\t\t\t\tmargin-top: 10px;\n\t\t\t\ttext-align: center;\n\t\t\t\twidth: 33%;\n\t\t\t}\n\t\t\t#gallery-1 img {\n\t\t\t\tborder: 2px solid #cfcfcf;\n\t\t\t}\n\t\t\t#gallery-1 .gallery-caption {\n\t\t\t\tmargin-left: 0;\n\t\t\t}\n\t\t\t\/* see gallery_shortcode() in wp-includes\/media.php *\/\n\t\t<\/style>\n\t\t<div id='gallery-1' class='gallery galleryid-1168 gallery-columns-3 gallery-size-thumbnail'><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-02.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-02-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-02-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-02-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-02-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-02.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-03.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-03-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-03-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-03-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-03-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-03.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-04.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-04-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-04-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-04-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-04-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-04.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl><br style=\"clear: both\" \/><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-05.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-05-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-05-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-05-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-05-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-05.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl>\n\t\t\t<br style='clear: both' \/>\n\t\t<\/div>\n\n<p>A la diff\u00e9rence d&rsquo;une inscription sur un site classique avec login \/ mot de passe, ce site va utiliser un certificat avec une clef personnelle qui sera stock\u00e9e dans le navigateur. Lors de vos prochaines connexions, ce certificat sera utilis\u00e9 pour vous identifier.<\/p>\n<p>Ici, sur Firefox, on peut visualiser le certificat dans : Firefox \/ Pr\u00e9f\u00e9rences \/ Avanc\u00e9 \/ Certificats \/ Afficher les certificats \/ Vos certificats.<\/p>\n<p><a href=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-07.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-1195\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-07.png\" alt=\"StartSSL-07\" width=\"620\" height=\"291\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-07.png 758w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-07-175x82.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-07-300x141.png 300w\" sizes=\"auto, (max-width: 620px) 100vw, 620px\" \/><\/a><\/p>\n<p>Faites-en une <a title=\"StartSSL - Backup client certificate\" href=\"https:\/\/startssl.com\/?app=25#4\" target=\"_blank\">sauvegarde<\/a> car si vous le perdez, c&rsquo;est foutu !<\/p>\n<p><em><strong>Validation d&rsquo;une adresse email<\/strong><\/em><\/p>\n<p>Les \u00e9tapes suivantes sont classiques. Entrez une adresse mail et un code y sera envoy\u00e9.<br \/>\nUne fois re\u00e7u, introduisez-le dans le formulaire.<\/p>\n\n\t\t<style>\n\t\t\t#gallery-2 {\n\t\t\t\tmargin: auto;\n\t\t\t}\n\t\t\t#gallery-2 .gallery-item {\n\t\t\t\tfloat: left;\n\t\t\t\tmargin-top: 10px;\n\t\t\t\ttext-align: center;\n\t\t\t\twidth: 33%;\n\t\t\t}\n\t\t\t#gallery-2 img {\n\t\t\t\tborder: 2px solid #cfcfcf;\n\t\t\t}\n\t\t\t#gallery-2 .gallery-caption {\n\t\t\t\tmargin-left: 0;\n\t\t\t}\n\t\t\t\/* see gallery_shortcode() in wp-includes\/media.php *\/\n\t\t<\/style>\n\t\t<div id='gallery-2' class='gallery galleryid-1168 gallery-columns-3 gallery-size-thumbnail'><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-08.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-08-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-08-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-08-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-08-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-08.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-09.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-09-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-09-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-09-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-09-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-09.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-10.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-10-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-10-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-10-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-10-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-10.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl><br style=\"clear: both\" \/><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-11.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-11-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-11-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-11-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-11-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-11.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl>\n\t\t\t<br style='clear: both' \/>\n\t\t<\/div>\n\n<p><em><strong>Validation d&rsquo;un domaine<\/strong><\/em><\/p>\n<p>Reste maintenant \u00e0 prouver que vous \u00eates bien le d\u00e9tenteur du site associ\u00e9 au nom de domaine.<br \/>\nPour cela, StartSSL va proc\u00e9der \u00e0 une v\u00e9rification email vers une adresse associ\u00e9e au d\u00e9tenteur : postmaster@domaine.tld, hostmaster@domaine.tld, webmaster@domaine.tld, &#8230;<br \/>\nCes adresses sont g\u00e9n\u00e9ralement redirig\u00e9es vers une de vos adresses principales.<\/p>\n\n\t\t<style>\n\t\t\t#gallery-3 {\n\t\t\t\tmargin: auto;\n\t\t\t}\n\t\t\t#gallery-3 .gallery-item {\n\t\t\t\tfloat: left;\n\t\t\t\tmargin-top: 10px;\n\t\t\t\ttext-align: center;\n\t\t\t\twidth: 33%;\n\t\t\t}\n\t\t\t#gallery-3 img {\n\t\t\t\tborder: 2px solid #cfcfcf;\n\t\t\t}\n\t\t\t#gallery-3 .gallery-caption {\n\t\t\t\tmargin-left: 0;\n\t\t\t}\n\t\t\t\/* see gallery_shortcode() in wp-includes\/media.php *\/\n\t\t<\/style>\n\t\t<div id='gallery-3' class='gallery galleryid-1168 gallery-columns-3 gallery-size-thumbnail'><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-12.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-12-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-12-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-12-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-12-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-12.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-13.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-13-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-13-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-13-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-13-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-13.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-14.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-14-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-14-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-14-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-14-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-14.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl><br style=\"clear: both\" \/><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-15.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-15-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-15-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-15-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-15-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-15.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-16.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-16-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-16-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-16-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-16-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-16.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl>\n\t\t\t<br style='clear: both' \/>\n\t\t<\/div>\n\n<p><em><strong>Cr\u00e9ation des certificats<\/strong><\/em><\/p>\n<p>Passons maintenant \u00e0 la phase de cr\u00e9ation des certificats SSL pour Nginx :<\/p>\n\n\t\t<style>\n\t\t\t#gallery-4 {\n\t\t\t\tmargin: auto;\n\t\t\t}\n\t\t\t#gallery-4 .gallery-item {\n\t\t\t\tfloat: left;\n\t\t\t\tmargin-top: 10px;\n\t\t\t\ttext-align: center;\n\t\t\t\twidth: 33%;\n\t\t\t}\n\t\t\t#gallery-4 img {\n\t\t\t\tborder: 2px solid #cfcfcf;\n\t\t\t}\n\t\t\t#gallery-4 .gallery-caption {\n\t\t\t\tmargin-left: 0;\n\t\t\t}\n\t\t\t\/* see gallery_shortcode() in wp-includes\/media.php *\/\n\t\t<\/style>\n\t\t<div id='gallery-4' class='gallery galleryid-1168 gallery-columns-3 gallery-size-thumbnail'><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-17.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-17-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-17-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-17-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-17-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-17.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-18.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-18-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-18-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-18-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-18-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-18.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-19.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-19-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-19-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-19-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-19-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-19.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl><br style=\"clear: both\" \/><dl class='gallery-item'>\n\t\t\t<dt class='gallery-icon landscape'>\n\t\t\t\t<a href='https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-20.png'><img loading=\"lazy\" decoding=\"async\" width=\"175\" height=\"124\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-20-175x124.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-20-175x124.png 175w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-20-300x213.png 300w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-20-1024x727.png 1024w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-20.png 1440w\" sizes=\"auto, (max-width: 175px) 100vw, 175px\" \/><\/a>\n\t\t\t<\/dt><\/dl>\n\t\t\t<br style='clear: both' \/>\n\t\t<\/div>\n\n<p><em><strong>Int\u00e9grations \u00e0 Nginx<\/strong><\/em><\/p>\n<p>Il est temps maintenant d&rsquo;installer les clefs et certificats sur notre serveur. La proc\u00e9dure est en partie d\u00e9crite dans la <a title=\"StartSSL FAQ\" href=\"https:\/\/www.startssl.com\/?app=42\" target=\"_blank\">FAQ<\/a> de StartSSL.<\/p>\n<p>On commence par cr\u00e9er un dossier dans lequel on va placer les clefs et le certificat.<\/p>\n<pre>$ sudo mkdir \/etc\/nginx\/ssl\/\r\n$ cd \/etc\/nginx\/ssl\/<\/pre>\n<p>On y copie la clef <code>ssl.key<\/code> et le certificat <code>ssl.crt<\/code> qui ont \u00e9t\u00e9 g\u00e9n\u00e9r\u00e9s par StartSSL.<\/p>\n<p>On d\u00e9crypte la clef :<\/p>\n<pre>$ openssl rsa -in ssl.key -out ssl.key<\/pre>\n<p>On prot\u00e8ge la clef en r\u00e9servant les droits de lecture\/\u00e9criture uniquement au propri\u00e9taire :<\/p>\n<pre>$ chmod 600 ssl.key<\/pre>\n<p>On r\u00e9cup\u00e8re le CA racine et les certificats serveur interm\u00e9diaire CA de classe 1 :<\/p>\n<pre>$ wget http:\/\/www.startssl.com\/certs\/ca.pem\r\n$ wget http:\/\/www.startssl.com\/certs\/sub.class1.server.ca.pem<\/pre>\n<p>On cr\u00e9e un certificat unifi\u00e9 \u00e0 partir de votre certificat personnel et des certificats CA :<\/p>\n<pre>$ cat ssl.crt sub.class1.server.ca.pem ca.pem &gt; ssl-unified.crt<\/pre>\n<p style=\"padding-left: 30px;\">Dans mon cas, le certificat n&rsquo;a pas \u00e9t\u00e9 accept\u00e9 tout de suite par Nginx. Il manquait un retour \u00e0 la ligne dans le fichier <code>ssl-unified.crt<\/code> entre la fin du certificat pr\u00e9c\u00e9dent et le d\u00e9but du suivant.<\/p>\n<p style=\"padding-left: 30px;\">On avait :<\/p>\n<pre style=\"padding-left: 30px;\">-----END CERTIFICATE----------BEGIN CERTIFICATE-----<\/pre>\n<p style=\"padding-left: 30px;\">Au lieu de :<\/p>\n<pre style=\"padding-left: 30px;\">-----END CERTIFICATE-----\r\n-----BEGIN CERTIFICATE-----<\/pre>\n<p>On \u00e9dite le fichier de configuration de Nginx pour y int\u00e9grer les param\u00e8tres SSL :<\/p>\n<pre>server {\r\n    listen 443 ssl;\r\n    ssl on;\r\n    ssl_certificate \/etc\/nginx\/ssl\/ssl-unified.crt;\r\n    ssl_certificate_key \/etc\/nginx\/ssl\/ssl.key;\r\n\r\n    La suite des param\u00e8tres ici\r\n }<\/pre>\n<p>Et on red\u00e9marre Nginx :<\/p>\n<pre>$ sudo service nginx restart<\/pre>\n<p>Si tout s\u2019est bien pass\u00e9, Nginx ne devrait pas afficher d\u2019erreur.<\/p>\n<p>Lors de la connexion au serveur, le navigateur devrait afficher quelque chose comme ceci :<\/p>\n<p><a href=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-21.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1215\" src=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-21.png\" alt=\"StartSSL-21\" width=\"406\" height=\"455\" srcset=\"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-21.png 406w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-21-156x175.png 156w, https:\/\/www.fanjoe.be\/wp-content\/uploads\/2015\/01\/StartSSL-21-268x300.png 268w\" sizes=\"auto, (max-width: 406px) 100vw, 406px\" \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><strong>Edit 2016-12-17 :<\/strong><\/p>\n<p>Suite aux probl\u00e8mes rencontr\u00e9s par StartSSL, j&rsquo;ai publi\u00e9 <a href=\"https:\/\/www.fanjoe.be\/?p=2266\">un nouveau billet<\/a> d\u00e9crivant la marche \u00e0 suivre&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[10,3,12],"tags":[107,104,51,103],"class_list":["post-1168","post","type-post","status-publish","format-standard","hentry","category-geek","category-informatique","category-raspberrypi","tag-chiffrement","tag-https","tag-nginx","tag-ssl","end"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=\/wp\/v2\/posts\/1168","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1168"}],"version-history":[{"count":0,"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=\/wp\/v2\/posts\/1168\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1168"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1168"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1168"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}