# SSL Installation on Apache 2.4.9

## Question:

My SSL Certificate is already active. How do I install it?

## Answer:

<div id="bkmrk-1.-connect-to-your-h">1. Connect to your host ;</div><div id="bkmrk-2.%C2%A0turn-on-ssl-mod%3A">2. Turn on SSL mod:</div>```
sudo a2enmod ssl
```

<div id="bkmrk-3.%C2%A0check-your-config">3. Check your config path</div>```
 apachectl -S
```

<div id="bkmrk-4.%C2%A0open-your-config%2C">4. Open your config, e.g. in Ubuntu path would be:</div>```
/etc/apache2/sites-enabled/000-default.conf:1
```

<div id="bkmrk-5.-to-set-up-a-virtu">5. To set up a virtual host for HTTPS (port 443) include the following into your configuration.  
Don't forget to include files to correct folders.  
Save configuration.</div>```
<VirtualHost *:443><br></br>ServerName example.com <span><em>(replace with your domain)</em></span><br></br>DocumentRoot /var/www/<br></br>SSLEngine on<br></br>SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem<br></br>SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key<br></br>SSLCertificateChainFile /etc/ssl/certs/hosted_fun.ca-bundle<br></br></VirtualHost>
```

<div id="bkmrk-5.%C2%A0here%27s-an-explana">5. Here's an explanation of directives</div>```
SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem - this is a pem certificate for site itself<br></br>SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key - your private key<br></br>SSLCertificateChainFile /etc/ssl/certs/hosted_fun.ca-bundle - bundle from downloaded archive (obsolete since 2.4.8, you can comment it by adding "#" before SSLCertificateChainFile or leave it but it won't affect configuration)
```

<div id="bkmrk-6.%C2%A0check-config-synt">6. Check config syntax after you've changed configuration:</div>```
apachectl -t
```

7\. Restart Apache service:

```
sudo service apache2 reload
```

Changes will affect immediately.