How to Install a Custom SSL Certificate on OVH

Learn how to install a custom SSL certificate on OVH easily. Follow real commands and setup steps for Nginx or Apache to secure your website fast. Our Live Support Team is always here to help you.

How to Install a Custom SSL Certificate on OVH

Securing your website isn’t just about trust, it’s about safety, credibility, and better rankings. Installing a custom SSL certificate on OVH ensures every visitor’s connection is encrypted and protected. Many website owners overlook this step until browsers start warning users about insecure connections. Let’s go straight into how you can install a custom SSL certificate on your OVH VPS without wasting time.

Logging in to Your OVH VPS

First, access your VPS. You’ll need SSH access and your OVH login details. Use PuTTY or your system terminal, then connect to your server:

ssh root@<vps_ip>

Replace <vps_ip> with your actual OVH VPS IP address. Once logged in, you’re ready to begin.

Installing Certbot

Certbot helps you handle SSL certificates efficiently. Depending on your system, use the command below to install it:

sudo apt update

sudo apt install certbot

Now verify that Certbot is installed properly:

certbot --version

You should see the version displayed. This means Certbot is good to go.

Getting Your SSL Certificate with Let’s Encrypt

Once your web server (Nginx or Apache) is configured, Certbot can automatically generate and apply your SSL.

For Nginx:

sudo apt install python3-certbot-nginx -y

sudo certbot --nginx -d your_domain

This automatically sets up HTTPS redirection and configures your SSL.

For Apache:

You can do the same using the Apache plugin. However, if you prefer more control, you can run Certbot in standalone mode.

Standalone Method:

sudo certbot certonly --standalone -d your_domain

This method stops any service using port 80 temporarily while validation runs. Once completed, your certificate files will be stored here:

/etc/letsencrypt/live/your_domain/

You’ll find:

• fullchain.pem – your full certificate
• privkey.pem – your private key

Setting Up Your Web Server

Now it’s time to configure Nginx or Apache manually using your generated SSL files.

For Nginx:

Edit your site configuration (e.g., /etc/nginx/sites-available/your_domain.conf):

server {

listen 443 ssl;

server_name your_domain;

ssl_certificate /etc/letsencrypt/live/your_domain/fullchain.pem;

ssl_certificate_key /etc/letsencrypt/live/your_domain/privkey.pem;

ssl_protocols TLSv1.2 TLSv1.3;

ssl_ciphers HIGH:!aNULL:!MD5;

location / {

try_files $uri $uri/ =404;

}

}

server {

listen 80;

server_name your_domain;

return 301 https://$host$request_uri;

}

Finally, check and reload Nginx:

sudo nginx -t

sudo systemctl reload nginx

Now open your website in HTTPS to confirm everything’s working.

For Apache:

Activate SSL and header modules:

sudo a2enmod ssl

sudo a2enmod headers

Then edit your site config (/etc/apache2/sites-available/your_domain.conf):

<VirtualHost *:80>

ServerName your_domain

DocumentRoot /var/www/your_domain

Redirect permanent / https://your_domain/

<Directory /var/www/your_domain>

AllowOverride All

Require all granted

</Directory>

ErrorLog ${APACHE_LOG_DIR}/ssltest_error.log

CustomLog ${APACHE_LOG_DIR}/ssltest_access.log combined

</VirtualHost>

<VirtualHost *:443>

ServerName your_domain

DocumentRoot /var/www/your_domain

SSLEngine on

SSLCertificateFile /etc/letsencrypt/live/your_domain/fullchain.pem

SSLCertificateKeyFile /etc/letsencrypt/live/your_domain/privkey.pem

SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1

SSLCipherSuite HIGH:!aNULL:!MD5

SSLHonorCipherOrder on

<Directory /var/www/your_domain>

AllowOverride All

Require all granted

</Directory>

ErrorLog ${APACHE_LOG_DIR}/ssltest_error.log

CustomLog ${APACHE_LOG_DIR}/ssltest_access.log combined

</VirtualHost>

Then test and restart Apache:

sudo apachectl configtest

sudo systemctl restart apache2

Your Apache site should now load securely via HTTPS.

Automatic Renewal of SSL

Let’s Encrypt certificates last for 90 days. Luckily, Certbot handles automatic renewals. Test it once using:

sudo certbot renew --dry-run

Certbot usually adds a cron job or systemd timer automatically. Check its schedule by running:

sudo systemctl list-timers | grep certbot

Conclusion

Installing a custom SSL certificate on OVH doesn’t just protect your website, it boosts user trust and search visibility. Once configured, your website will always stay secure and display the green lock of confidence.

So go ahead and install a custom SSL certificate today to keep your visitors safe and your site performing at its best.