SSL Complete Guide 2020: HTTP to HTTPS

SSL Complete Guide 2020: HTTP to HTTPS

English | MP4 | AVC 1280×720 | AAC 48KHz 2ch | 11 Hours | 5.50 GB

Configure Cloudflare, FREE Let’s Encrypt SSL/TLS certificate, NGINX and Apache web servers, create CSR SSL request

This course is all about securing websites with SSL/TLS certificates.

Become a master of HTTPS, Let’s Encrypt, Cloudflare, NGINX and SSL/TLS Certificates.

This is the most complete practical SSL guide here on Udemy that includes tons of practical activities. All practice exercises are performed on a real domain and real hosting and finally you will get production ready solution with HTTPS setup and redirection of HTTP to HTTPS. You can have zero knowledge about computer networks, encryption, configuration of web servers. All will be taught from scratch, from simple setup to complex solution. If you want to get deep knowledge of SSL and HTTPS this course is for you!

We will start by exploring basics of symmetric encryption algorithms like AES, asymmetric encryption RSA, hashing protocols MD5 and SHA. Also I will explain you fundamentals of computer networks, TCP/IP stack and for that we will use Wireshark traffic analyzer.

You will learn what is the structure of the SSL/TLS certificate. Also you will understand why CAs (Certificate Authorities) are needed and how chain of trust is built.

In practice sections we will perform multiple practice activities:

  • Buy a domain and configure DNS settings
  • Use Certbot ACME client to automatically obtain free SSL certificate from Let’s Encrypt
  • With help of OpenSSL generate RSA keys, self-signed certificates
  • Secure WordPress with Apache using SSL/TLS certificates
  • Create CSR (Certificate Signing Request) by OpenSSL and submit CSR to CA server
  • Configure Cloudflare for your domain and setup different SSL modes of operations
  • Install and configure NGINX web server for SSL/TLS certificates
  • Migrate from HTTP to HTTPS
  • Redirect all traffic using HTTP 301 redirect from HTTP to HTTPS

What you’ll learn

  • Learn how to install SSL/TLS Certificate on the web server
  • What is the difference between HTTP and HTTPS
  • What is CA (Certificate Authority) and how chain of trust is built
  • How TLS certificate is structured (subject name, issuer name, validity period, signature etc.)
  • Let’s Encrypt free certificates that are valid 90 days. Certbot ACME client for automatic certificate issuing and renewal
  • Cloudflare reverse proxy with free SSL certificates
  • CSR (Certificate Signing Request), domain validation and certificate installation
  • Install and configure NGINX web server for SSL/TLS encryption
Table of Contents

Introduction to the HTTPS and TLS
1 Intro
2 Section 1 Introduction
3 Overview of researches dedicated to SSL, TLS and HTTPS
4 Overview of the certificates of some popular websites
5 Difference between HTTP and HTTPS
6 Analyzing traffic using Wireshark
7 TCPIP stack by example
8 Analyzing HTTP protocol using Wireshark
9 Analyzing HTTPS and TLS using Wireshark

Encryption and hashing overview
10 Section 2 Introduction
11 RSA Overview
12 PKI – Public Key Infrastructure Overview
13 Certificate overview
14 Symmetric Key Encryption
15 Symmetric Key Encryption Algorithms
16 Hashing Overview
17 MD5 hashing algorithm
18 SHA hashing algorithm and HMAC overview
19 Asymmetric keys overview
20 Encryption using asymmetric keys
21 Signing data using assymmetric keys

RSA, Certificates and Chain of Trust
22 Section 3 Introduction
23 Verifying SSL certificate and certificates chain
24 PKI, Chain of trust and certificates summary
25 Certificate domain scopes
26 Installing OpenSSL
27 Using OpenSSL for RSA keys generation
28 Exploring certificate of Instagram
29 Exploring certificate of Google
30 Exploring certificate of Comodo
31 Root CA and root certificates in the OS
32 How Chain of Trust is built
33 Verifying chain of certificates

SSL, TLS and HTTPS
34 Section 4 Introduction
35 Diffie Hellman overview
36 Modulus operation
37 Diffie Hellman algorithm
38 Elliptic Curve Cryptography Overview
39 Point Addition on Elliptic Curve
40 Multiple Point Addition
41 Point Doubling and Optimization
42 Elliptic Curve Discrete Log Problem
43 Comparing formulas
44 ECDHE – Elliptic Curve Diffie Hellman Exchange
45 Introduction to the SSL and TLS
46 Exploring ECDHE with ECDSA
47 History and versions of the SSL and TLS
48 Why RSA is not used for data encryption in HTTPS
49 How TLS session is established
50 Analyzing TLS session setup using Wireshark
51 Overview of cipher suites
52 Encryption key generation by the web browser
53 Delivering encryption key using Diffie Hellman key exchange

Launching TLS secured website with free domain and hosting
54 Section 5 Introduction
55 Free domains overview
56 Setting up free domain and hosting using GitHub Pages
57 Exploring TLS session with our website at Github.io – PART 1
58 Exploring TLS session with our website at Github.io – PART 2

Custom domain with free hosting
59 Section 6 Introduction
60 Planning next steps with Paid Domain
61 Buying a domain
62 Setting up free hosting
63 Overview of the TLS settings at the free hosting
64 OPTIONAL – Trying to install free Let’s Encrypt TLS certificate on free hosting

Free TLS certificate (Let’s Encrypt) at paid hosting
65 Section 7 Introduction
66 Exploring TLS certificates via shell
67 Exploring certbot configuration and testing renewal
68 What we have got so far
69 VPS vs Dedicated Server
70 Hosting Services Overview – PART 1
71 Hosting Services Overview – PART 2
72 Buying a droplet at DigitalOcean
73 Launching WordPress website with HTTPS
74 Exploring our brand new TLS Certificate
75 Finishing WordPress installation
76 Let’s Encrypt and Certbot Overview

Cloudflare with free TLS certificate
77 Section 8 Introduction
78 Reverse Proxy and Cloudflare
79 Overview of the current setup
80 Moving our website to Cloudflare
81 Exploring free TLS certificate from Cloudflare
82 Exploring TLS settings at Cloudflare
83 Cloudflare SSL Operation Modes
84 Flexible SSL Operation Mode at Cloudflare
85 Off SSL Operation Mode at Cloudflare

Configuring NGINX web server and installing TLS certificate
86 Section 9 Introduction
87 Current Setup and planning next steps
88 Installing Nginx web server
89 Configuring Nginx web server
90 Setting up Cloudflare Origin TLS certificate
91 Cloudflare summary
92 Disable Cloudflare

Creating self-signed certificate using OpenSSL
93 Section 10 Introduction
94 Current Nginx server setup overview
95 CSR – Certificate Signing Request
96 Generate Self-Signed certificate using OpenSSL
97 Self-signed certificate overview
98 Cloudflare and self-signed certificate

Getting and installing custom certificate
99 Section 11 Introduction
100 Custom TLS Certificate Summary
101 Paid certificates overview
102 Getting 90-days valid free TLS certificate
103 Installing Custom TLS Certificate
104 Analyzing our new custom TLS Certificate
105 Our TLS Setup is not complete
106 Installing TLS certificate of intermediate CA
107 HTTP and HTTPS versions of website
108 Configuring 301 Redirects to HTTPS

Cleanup
109 Cleanup

Summary
110 Summary