From 8f2ed0cda96f3a607644e75b4578bb4de0796e43 Mon Sep 17 00:00:00 2001
From: Bob Mottram
-You will need to have a non self-signed SSL certificate in order to use Hubzilla. Put the public certificate in /etc/ssl/certs/yourhubzilladomainname.crt and the private certificate in /etc/ssl/private/yourhubzilladomainname.key. If there is an intermediate certificate needed (such as with StartSSL) then this will need to be concatenated onto the end of the crt file, like this: -
- -cat /etc/ssl/certs/yourhubzilladomainname.crt /etc/ssl/chains/startssl-sub.class1.server.ca.pem > - /etc/ssl/certs/yourhubzilladomainname.bundle.crt --
-Then change ssl_certificate to /etc/ssl/certs/yourhubzilladomainname.bundle.crt within /etc/nginx/sites-available/yourhubzilladomainname +Both Hubzilla and GNU Social try to obtain certificates automatically at the time of installation via Let's Encrypt. This will likely mean that in order for this to work you'll need to have obtained at least one "official" domain via a domain selling service, since Let's Encrypt mostly doesn't seem to work with free subdomains from sites such as freeDNS.