SSL Cert installation issue

ironhide

Hello guys

I have a setup where Nginx is sitting in front of Apache as a reverse proxy. Now I want to install SSL cert for this domain. I want to know, do I need to install the SSL certificate for both Apache and Nginx or just Nginx only?

Thanks in advance.

definedcode

@ironhide said:
Hello guys

I have a setup where Nginx is sitting in front of Apache as a reverse proxy. Now I want to install SSL cert for this domain. I want to know, do I need to install the SSL certificate for both Apache and Nginx or just Nginx only?

Thanks in advance.

It depends. What I would do is have the SSL only installed in Nginx and then have the HTTPS requests transform to HTTP via Nginx and then send them onto Apache and then to your backend as plain HTTP. This should increase performance in the reverse proxy and it doesn't affect your (+ your users) security if Nginx + Apache are on the same host.

...Unless you have an unfortunate backdoor on your host where people can sniff your internal traffic

lukesUbuntu

Adding SSL encryption between nginx and apache just adds more overhead and slows down the requests.
I have Nginx handle SSL, and apache just serves the content (NON SSL) seems fine no issues.

ironhide

Or should I bypass all the https traffic to Apache directly (with SSL installed in it)?

khav

Or a better alternative would be to just remove apache completely from the equation

Nginx+PHP-FPM+ MySQL(if you have a database) should be awesome

I have successfully installed AlphaSSL certificate for my site using nginx only.I ditched apache long back though