Overview 

This article outlines the process of renewing an SSL certificate for your Apache or x360Sync server.

For instructions on configuring a new SSL certificate, please reference the How to Configure a Single Domain SSL Certificate or a Wildcard Certificate Knowledgebase article.

Section 1: Apache Server

In order for mobile devices to log in, a valid CA signed SSL certificate must be installed for Apache.  Self-signed certificates are not supported.

1.1. Renew the certificate from your SSL certificate authority

1.1.1. Navigate to your chosen SSL Certificate Authority (for example, GoDaddy, Thawte, Verisign, and so forth) and log in. Each of these Certificate Authorities will provide a specific set of steps for renewing an SSL certificate. For example, you might need to re-submit your .csr file located in your Apache directory (for example,C:\Apache24\bin\ssl\_.yourdomainname.com.csr); or, your Certificate Authority might already hold a copy of this file in their system.

1.1.2. When this process is complete, your SSL Certificate Authority will provide you with two updated files: a .crt file and a bundle.crt file. 

Make sure that you specify Apache server type when you download the files.

1.1.3. After your SSL Certificate Authority provides you with the .crt file and the bundle.crt file, move the files into the C:\Apache24\conf\ssl\ directory.

1.2. Update http.conf and restart the Apache service

1.2.1.  Navigate to Apache’s conf directory (for example, C:\Apache24\conf\) and open the httpd.conf file.

1.2.2. In the VirtualHostsection, update the following lines:

• SSLCertificateFile "C:\Apache24\conf\ssl\yourdomainname.crt"
• SSLCertificateChainFile "C:\Apache24\conf\ssl\yourbundle.crt"
  
  For example:
• <VirtualHost_default_:510>
  SSLEngine on
  SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
  SSLCertificateFile "C:\Apache24\conf\ssl\yourdomainname.crt"
  SSLCertificateKeyFile "C:\Apache24\conf\ssl\yourdomainname.key"
  SSLCertificateChainFile "C:\Apache24\conf\ssl\yourbundle.crt"
  AllowEncodedSlashes On
  </VirtualHost>

1.2.3. Save and close the file.

1.2.4. Restart your x360Sync Server Service.

Section 2: x360Sync Server

If you use an SSL certificate for your x360Sync server—for example, for WebDAV support—you will also need to periodically renew the SSL certificate for your x360Sync server.

2.1. Chain the files

2.1.1. After you receive your renewed .crt file and bundle.crt file, you will need to COPY the following two files from your Apache folder (for example, C:\Apache24\conf\ssl) and PASTE them into your x360Sync conf folder (for example, C:\x360Sync Server\conf folder).

• .crt file
• bundle.crt

2.1.2. Open the newly copied .crt file, select all of its contents, and then COPY its contents.

2.1.3. Open the newly copied bundle.crt file and place your mouse cursor at the beginning of the document (before the first character).

2.1.4. Paste the contents of the .crt file into the top of the bundle.crt file.

2.1.5. Save the modified bundle.crt file.

2.2. Modify config.ini and restart the x360Sync service