Birmingham mumbai

[
 364 
]
There's one more additional step we should perform for setting this up properly. At 
this point, our certificate files should be properly installed, but we'll need to inform 
Apache of when to apply them. If you recall, the 
default-ssl.conf
 file provided by 
the 
apache2
 package is answering requests for any traffic not otherwise identified by 
a virtual host (the 

 option). We will need to ensure our 
web server is handling traffic for our existing websites when TLS is requested. We 
can add a 
ServerName
 option to that file to ensure our site supports TLS.
Add the following option to the 
/etc/apache2/sites-available/default-ssl.conf
 
file, right underneath 

:
ServerName mydomain.com:443 
Now, when traffic comes into your server on port 
443
 requesting a domain that 
matches the domain you typed for the 
ServerName
 option, it should result in a secure 
browsing session for the client. You should see the green padlock icon in the address 
bar (this depends on your browser), which indicates your session is secured. If you're 
using self-signed certificates, you'll probably see an error you'll have to skip through 
first, and you may not get the green padlock icon. This doesn't mean the encryption 
isn't working; it just means your browser is skeptical of the certificate since it wasn't 
signed by a known certificate authority. Your session will still be encrypted.
If you are planning on hosting multiple websites over HTTPS, you may want to 
consider using a separate virtual host file for each. An easy way to accomplish this is 
to use the 
/etc/apache2/sites-available/default-ssl.conf
 file as a template and 
change 
DocumentRoot
 to the directory that hosts the files for that site. In addition, be 
sure to update the 
SSLCertificateFile
 and 
SSLCertificateKeyFile
 options to point 
to the certificate files for the site and set 
ServerName
 to the domain that corresponds 
to your site. Here's an
 example virtual host file for
 a hypothetical site that uses TLS. 
I've highlighted lines that I've changed from the normal 
default-ssl.conf
 file:
 
         
                ServerName acmeconsulting.com:443 
 
                ServerAdmin webmaster@localhost 
 
                DocumentRoot /var/www/acmeconsulting