How to Use SSL Certificates in My Website

SSL (Secure Socket Layer) certificates are used on websites to provide security and authentication for on-line transactions. The communication is encrypted through the use of a public encryption key provided to the browser by the website. The information can only be decrypted by the matching private key that is held on the web server. The certificate is signed by a trusted third party so that visitors can be assured the website is what it claims to be.

Things You'll Need

• OpenSSL

Instructions

1. Create a public and private SSL key pair with software such as OpenSSL. OpenSSL can be compiled on any operating system using a C compiler.

2. Obtain an SSL Certificate from a reputable Certificate Authority such as Verisign or Thawte by sending the public key to the Certificate Authority.

3. Install the certificate on your web server. Consult your web host or web server documentation for instructions on how to do this.

4. Edit your web pages so they send the certificate to the browser as the MIME type application/x-x-ca-cert. Replace "x-x-ca-cert" with the appropriate certification name.

5. Edit your web pages to use the "https" protocol rather than the standard "http" protocol. The "https" protocol tells the web browser to use a secured layer to communicate with the web server.

References

• Web Hosting Howto: How Can I Use SSL or TSL to Secure My Visitor's Information
• OpenSSL FAQ

Resources

• openssl.org: OpenSSL
• verisign.com: Verisign
• thawte.com: Thawte