1 00:00:00,000 --> 00:00:01,216 - [Narrator] Hi and welcome back. 2 00:00:01,216 --> 00:00:02,723 In this video, we're going to be getting 3 00:00:02,723 --> 00:00:05,104 our SSL certificate. 4 00:00:05,104 --> 00:00:07,414 As you can see, I've opened Cloudflare 5 00:00:07,414 --> 00:00:10,787 and I've gone to my website using Google Chrome 6 00:00:10,787 --> 00:00:13,227 as opposed to Safari in this case. 7 00:00:13,227 --> 00:00:16,065 I encourage you to use Chrome in this video 8 00:00:16,065 --> 00:00:19,589 because at time of recording, it was the only browser 9 00:00:19,589 --> 00:00:22,339 that could generate a signing key 10 00:00:23,336 --> 00:00:26,626 for generating our SSL certificate. 11 00:00:26,626 --> 00:00:28,321 So you can use a browser of choice, 12 00:00:28,321 --> 00:00:31,490 but it might fail, and in that case, you should use Chrome 13 00:00:31,490 --> 00:00:33,413 only to create the certificate. 14 00:00:33,413 --> 00:00:37,564 Your site will be accessible from any browser. 15 00:00:37,564 --> 00:00:41,323 We're going here to the Crypto tab in Cloudflare 16 00:00:41,323 --> 00:00:44,835 and then we're going to press in the SSL settings 17 00:00:44,835 --> 00:00:46,825 full or full strict. 18 00:00:46,825 --> 00:00:49,820 Full strict checks the connection between Cloudflare 19 00:00:49,820 --> 00:00:51,634 and your server a bit more thoroughly, 20 00:00:51,634 --> 00:00:53,640 make sure the certificate is valid, 21 00:00:53,640 --> 00:00:56,022 but since we're generating it here, it's going to be valid. 22 00:00:56,022 --> 00:00:57,598 You can choose full strict. 23 00:00:57,598 --> 00:01:01,639 And then we're going to go down to Origin Certificates. 24 00:01:01,639 --> 00:01:04,572 As you can see, there are no certificates right now. 25 00:01:04,572 --> 00:01:08,264 And I'm going to press Create Certificate. 26 00:01:08,264 --> 00:01:10,319 And it says here, the first step in generating a certificate 27 00:01:10,319 --> 00:01:11,577 is to create a private key 28 00:01:11,577 --> 00:01:13,896 and a certificate signing request. 29 00:01:13,896 --> 00:01:16,525 Chrome can do this, so you can let Cloudflare 30 00:01:16,525 --> 00:01:18,876 generate the key and CSR. 31 00:01:18,876 --> 00:01:20,037 If you're using a different browser, 32 00:01:20,037 --> 00:01:22,798 you may not be able to do it. 33 00:01:22,798 --> 00:01:25,554 And the host names, you should leave them as default, 34 00:01:25,554 --> 00:01:27,301 but if not, just if they're not there, 35 00:01:27,301 --> 00:01:31,271 just make sure to have asterisk dot your domain 36 00:01:31,271 --> 00:01:32,604 and your domain. 37 00:01:33,602 --> 00:01:36,449 That's two separate entities there. 38 00:01:36,449 --> 00:01:39,640 That way, you'll cover all your bases. 39 00:01:39,640 --> 00:01:41,190 For the certificate validity, 40 00:01:41,190 --> 00:01:43,716 you can choose however long you want 41 00:01:43,716 --> 00:01:47,883 and but I tend to leave it as 15 years, and that'll be fine. 42 00:01:49,893 --> 00:01:50,800 And there you have it. 43 00:01:50,800 --> 00:01:53,216 You've got, here, the key formats. 44 00:01:53,216 --> 00:01:54,409 I'm going to leave it as PEM. 45 00:01:54,409 --> 00:01:56,493 That's the easiest to work with. 46 00:01:56,493 --> 00:01:58,016 And you've got your certificate here, 47 00:01:58,016 --> 00:02:02,183 you produce your origin certificate and your private key. 48 00:02:04,011 --> 00:02:06,433 And it also even gives you some instructions 49 00:02:06,433 --> 00:02:09,065 for installation if you choose NGINX. 50 00:02:09,065 --> 00:02:10,345 However, you don't need to go there, 51 00:02:10,345 --> 00:02:11,352 because I'm going to be teaching 52 00:02:11,352 --> 00:02:13,804 you exactly how to set this up. 53 00:02:13,804 --> 00:02:16,051 So once you've got these two things here, 54 00:02:16,051 --> 00:02:19,562 don't close this window, or at least copy these 55 00:02:19,562 --> 00:02:21,308 and put them somewhere safe. 56 00:02:21,308 --> 00:02:22,770 You're going to be deleting them momentarily. 57 00:02:22,770 --> 00:02:25,542 They're only going to be in your server and that's it. 58 00:02:25,542 --> 00:02:26,940 But we're going to need them, obviously, 59 00:02:26,940 --> 00:02:30,435 to put in the server and allow NGINX 60 00:02:30,435 --> 00:02:33,852 to use these to serve the HTTPS requests. 61 00:02:35,682 --> 00:02:37,494 So make sure to keep this tab open 62 00:02:37,494 --> 00:02:38,864 and let's go into the next video. 63 00:02:38,864 --> 00:02:41,219 We're going to be setting NGINX up with these. 64 00:02:41,219 --> 00:02:42,256 I'll see you there.