SSL/HTTPS

MediaWiki deployment package has installed the SSL module of Nginx and open Certificate Authority Let's Encrypt for you configure the HTTPS quickly and conveniently.

In addition to the vhost configuration file, HTTPS settings do not need to modify any files in Nginx

Quick configuration

If you want to use a free certificate, just run the one command certbot on your instance to start the HTTPS deployment.

sudo certbot

If you have applied for a commercial certificate, complete the HTTPS configuration in just three steps:

For MediaWiki (LAMP)

LAMP means that Apache for Web Server

1. Upload your certificate to the directory of your instance: /data/cert
2. Edit the vhost configuration file: /etc/httpd/conf.d/vhost.conf
3. Insert the HTTPS template segment <VirtualHost *:443>--</VirtualHost> into vhost.conf

   #-----HTTPS template start------------
   <VirtualHost *:443>
    ServerName  mediawiki.yourdomain.com
    DocumentRoot "/data/wwwroot/mediawiki"
    #ErrorLog "logs/mediawiki.yourdomain.com-error_log"
    #CustomLog "logs/mediawiki.yourdomain.com-access_log" common
    <Directory "/data/wwwroot/mediawiki">
    Options Indexes FollowSymlinks
    AllowOverride All
    Require all granted
    </Directory>
    SSLEngine on
    SSLCertificateFile  /data/cert/mediawiki.yourdomain.com.crt
    SSLCertificateKeyFile  /data/cert/mediawiki.yourdomain.com.key
    </VirtualHost>
   #-----HTTPS template end------------
   

4. Modify ServerName, SSLCertificateFile, SSLCertificateKeyFile
5. Save it and Restart Apache service

For MediaWiki (LEMP)

LEMP means that Nginx for Web Server

1. Upload your certificate to the directory of your instance: /data/cert
2. Edit the vhost configuration file: /etc/nginx/conf.d/default.conf
3. Insert the HTTPS template into MediaWiki's server{ } already existing

   #-----HTTPS template start------------
   listen 443 ssl; 
   ssl_certificate /data/cert/xxx.crt;
   ssl_certificate_key /data/cert/xxx.key;
   ssl_session_timeout 5m;
   ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
   ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
   ssl_prefer_server_ciphers on;
   #-----HTTPS template end------------
   

4. Modify ssl_certificate, ssl_certificate_key
5. Save it and Restart Nginx service

Special Guide

For details on configuring HTTPS pre-conditions, HTTPS configuration segment templates, precautions, detailed steps, and troubleshooting, refer to the HTTPS Special Guide provided by Websoft9