Nginx and VeriSign SSL Certificates

Although instructions are provided for many web servers/systems there are no instructions on the VeriSign web site on how to setup Nginx.

One tip that may save you a couple of minutes is that your Nginx SSL configuration will not work correctly with the VeriSign provided Apache CA bundle of intermediate certificates.

To get a certificate bundle that will work properly I suggest the following steps.

  • First download both the Primary Intermediate CA Certificate and the Secondary SSL Intermediate CA Certificate files.
  • Second, concatenate your certificate, then the primary CA certificate, then the secondary certificate into a single file.
  • Third reference the resulting file in your nginx SSL configuration, verify your configuration, and restart nginx.

To ensure everything is setup correctly you can verify your site using the VeriSign Certificate Check application.


3 thoughts on “Nginx and VeriSign SSL Certificates

  1. Peter Conerly December 6, 2012 / 6:55 pm

    Hey man, great post.

    I have a verisign file like yours, but it’s a *.cer so can I still add it?

    I don’t have a .key file– how big of a problem is that?

    In the 3rd step you say I should reference the file; but in nginx ssl there are multiple places to reference files. Which field are you referencing the file with?

  2. Jim McDonald December 9, 2012 / 12:35 am

    I don’t believe the extension of the filename (.cer) will matter as long as the contents of the certificate file is in the expected format.

    You’ll need the key that was used to create the certificate.

    In the 3rd step I’m referencing the file in the nginx server config.

  3. Srinivasa September 13, 2014 / 4:54 pm

    This Worked. Thank you.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s