1
00:00:00,510 --> 00:00:06,540
Now, let us see how to implement secure Apache Web server for that, we will be using third party

2
00:00:06,780 --> 00:00:10,500
certificate when we have to create the certificate.

3
00:00:10,530 --> 00:00:13,470
We have to relate that certificate with some domain name.

4
00:00:13,680 --> 00:00:19,830
In our case, we will be relating that certificate with our ocloud.in domainname.

5
00:00:20,190 --> 00:00:29,760
And because we are relating it with ocloud.in, we have to verify that domain name that it belongs to us.

6
00:00:30,000 --> 00:00:34,020
So we will be looking step by step after we have downloaded the certificate.

7
00:00:34,350 --> 00:00:43,330
We need to upload it into Apache Web server and then place filing certain places in that Apache server

8
00:00:43,650 --> 00:00:46,890
that we will see how to do so in our cases.

9
00:00:47,490 --> 00:00:55,650
First of all, we will go to the Apache and we will try to understand the directory structure, because

10
00:00:55,770 --> 00:01:00,810
we know that in Apache we have just installed httpd.

11
00:01:01,050 --> 00:01:11,580
But for that, for implementing SSL or https, we need to install certain packages so with pwd, we can check

12
00:01:12,180 --> 00:01:12,840
where we are.

13
00:01:13,140 --> 00:01:15,300
And with the cd command, what will happen?

14
00:01:15,750 --> 00:01:25,350
it will take us to our home directory then with the tree command, because all the configuration

15
00:01:25,350 --> 00:01:30,790
file for the apache server, they are in /etc/httpd directory.

16
00:01:30,930 --> 00:01:32,550
once We are going to run this command.

17
00:01:32,760 --> 00:01:35,930
It will say that command this can not find.

18
00:01:36,150 --> 00:01:41,690
So you can always install yum -q mean quite -y install tree.

19
00:01:42,150 --> 00:01:46,770
So this command is going to install tree command in silent mode.

20
00:01:47,910 --> 00:01:51,600
Then we will say tree httpd.

21
00:01:53,400 --> 00:01:54,890
So it is going to show files.

22
00:01:54,900 --> 00:02:04,410
look at this, the configuration file for https, which is ssl.conf is not available for that.

23
00:02:04,410 --> 00:02:11,550
We have to install certain packages and please remember for changing the color because that was not

24
00:02:11,550 --> 00:02:14,820
very comfortable when I was using the putty.

25
00:02:15,180 --> 00:02:21,300
So you have to just select in color use system color what will happen.

26
00:02:21,600 --> 00:02:24,440
It will change the background of the color.

27
00:02:24,450 --> 00:02:27,090
Let us see what happens then.

28
00:02:27,090 --> 00:02:27,990
What we are going to do.

29
00:02:28,680 --> 00:02:36,690
We will check whether rpm -q openssl is there and if it is not there, what we are going

30
00:02:36,690 --> 00:02:44,310
to do, we are going to install this and other package you have to verify is rpm -q mod_

31
00:02:44,310 --> 00:02:44,850
ssl.

32
00:02:45,270 --> 00:02:50,070
And initially when we installed that instance, this is available, this is not available.

33
00:02:50,070 --> 00:02:57,750
So how you are going to install yum -q install mod_ssl, so it will ask for the confirmation,

34
00:02:58,170 --> 00:02:59,280
then you can verify it.

35
00:03:00,690 --> 00:03:07,380
Then again, when we are going to run this command, what it is show it will show you that SSL is there

36
00:03:07,620 --> 00:03:09,540
now let us do this step.

37
00:03:12,150 --> 00:03:18,440
First of all, let me change that color in setting so we will go to the color.

38
00:03:19,160 --> 00:03:24,630
We will say system color that mean now little bit more visible.

39
00:03:25,380 --> 00:03:32,250
So in our case, because we have already installed this.

40
00:03:32,260 --> 00:03:33,870
So what it will be showing.

41
00:03:37,050 --> 00:03:46,860
Tree command is also there, so we are going to look at this directory, /etc/httpd.

42
00:03:49,950 --> 00:03:56,370
So what it is showing, it is showing you certain things, which files are there, httpd.conf is there

43
00:03:56,760 --> 00:04:05,400
But this is important that mean path is /etc/httpd/conf.d/ssl.conf is there because when we are going

44
00:04:05,400 --> 00:04:09,860
to create the certificate, we have to download the certificate.

45
00:04:10,170 --> 00:04:16,470
We have to put those certificates in certain directory, then we have to change the settings of this directory.

46
00:04:16,770 --> 00:04:25,740
we will be looking at this now again, which packages we just wanted to confirm openssl.

47
00:04:27,720 --> 00:04:29,360
It is installed then.

48
00:04:31,650 --> 00:04:35,280
mod_ssl.

49
00:04:38,090 --> 00:04:44,820
It is in our case, because we have already installed so it is showing that this package is available

50
00:04:45,530 --> 00:04:47,120
now, let us again move to.

51
00:04:50,900 --> 00:04:58,730
Then what we are going to do, we are going to search for the location of SSL certificates, so in that

52
00:04:58,730 --> 00:05:06,440
case, what you can do cat, with cat command you can open the file /etc/httpd/conf.d,

53
00:05:06,440 --> 00:05:13,220
ssl.conf grep then carrot symbol SSLCertificate.

54
00:05:13,220 --> 00:05:19,690
When you are going to run this command, it will show you one file, one parameter SSLcertificate file.

55
00:05:20,120 --> 00:05:31,160
This is the directory by default, it is showing one file, local.crt is there, then SSLcertificatekeyfile.

56
00:05:31,370 --> 00:05:37,630
It is going to show that your private keys is in this directory /etc/pki/tls/private.

57
00:05:38,060 --> 00:05:41,300
This is your file and what you can do?

58
00:05:41,420 --> 00:05:49,790
You have to find another parameter cat /etc/httpd/conf.d/ssl.conf grep again.

59
00:05:50,120 --> 00:05:52,880
carrot symbol hash SSL certificate.

60
00:05:53,330 --> 00:05:59,810
When you are going to initially run this command, it is going to say hash mean this parameter has not been

61
00:05:59,810 --> 00:06:00,320
enabled.

62
00:06:00,620 --> 00:06:05,720
It will show you that SSL certificate chain file in /etc/pki/tls/certs

63
00:06:05,720 --> 00:06:07,310
server-chain.crt.

64
00:06:07,490 --> 00:06:14,510
why we are discussing this, because when we are going to create one certificate on the site,

65
00:06:15,110 --> 00:06:23,440
third party site it is going to give us three files SSLCertificateFile, SSLCertificateKeyFile, SSLCertificate

66
00:06:23,810 --> 00:06:24,460
ChainFile.

67
00:06:24,950 --> 00:06:31,890
So we will when we are going to download and then upload in apache web server, we have to make changes here.

68
00:06:31,910 --> 00:06:34,050
What is the name of that file?

69
00:06:34,190 --> 00:06:35,820
What is the name of Private Key.

70
00:06:36,110 --> 00:06:37,090
What is the name of.

71
00:06:37,100 --> 00:06:38,900
And then we are going to uncomment.

72
00:06:38,900 --> 00:06:42,710
this also now with ls command.

73
00:06:42,710 --> 00:06:46,030
We can check this directory, we can check directly.

74
00:06:46,670 --> 00:06:55,760
Initially, this directory is empty and here it is showing certain file see a ca-bundle.cert.

75
00:06:56,660 --> 00:06:58,370
But those files are not there.

76
00:06:58,730 --> 00:07:01,760
Which files localhost.crt

77
00:07:01,760 --> 00:07:05,260
localhost.key and these are not available.

78
00:07:05,540 --> 00:07:08,540
So what we are going to do now, we want these files.

79
00:07:09,050 --> 00:07:17,270
So for our purposes, we will go to this site, www.sslforfree.com for getting a free certificate.

80
00:07:17,810 --> 00:07:20,720
We will first register for our account.

81
00:07:20,930 --> 00:07:23,120
In my case, I have already done this.

82
00:07:23,450 --> 00:07:27,230
So with your e-mail you have to specify some password.

83
00:07:27,920 --> 00:07:29,360
Very easy to register.

84
00:07:29,870 --> 00:07:33,170
So we will register, after register.

85
00:07:33,950 --> 00:07:34,730
What you can do.

86
00:07:35,480 --> 00:07:40,950
You can specify a way for which domain you want SSL certificate.

87
00:07:41,090 --> 00:07:50,180
We are going to specify you www.ocloud.in then what it will show it will take you to this dashboard

88
00:07:50,270 --> 00:07:51,320
certificate dashboard.

89
00:07:51,750 --> 00:07:53,630
Let us go first.

90
00:07:55,160 --> 00:07:57,810
This is the site as sslforfree.com.

91
00:07:58,790 --> 00:08:04,610
So first, what we are going to do, you can type the address here or what you can do login.

92
00:08:08,290 --> 00:08:12,130
So log in with your email account, whatever it is.

93
00:08:16,970 --> 00:08:18,740
And whatever is the password.

94
00:08:25,980 --> 00:08:26,640
So we will.

95
00:08:30,890 --> 00:08:35,250
Now, what we can do initially, this will be empty.

96
00:08:35,570 --> 00:08:39,440
So what we have to do, we have to click on new certificate.

97
00:08:41,480 --> 00:08:48,110
And you're going to specify new certificate, what are they going to show you on new certificate

98
00:08:49,370 --> 00:08:55,060
If you are going to select this, then that means pro version that mean, then you have to pay.

99
00:08:55,220 --> 00:08:56,510
So we will keep it here.

100
00:08:56,870 --> 00:08:58,040
Then what are you going to do?

101
00:08:59,930 --> 00:09:02,300
ocloud.

102
00:09:03,730 --> 00:09:04,270
in

103
00:09:06,540 --> 00:09:12,590
And please remember when we are going to enter this, what it will show that mean it is going to give

104
00:09:12,590 --> 00:09:18,960
you the domain certificate for which domain ocloud.in also www.ocloud.in.

105
00:09:20,360 --> 00:09:21,580
So that is good for us.

106
00:09:23,780 --> 00:09:31,940
Then when we are going to say next, it will say whether a 90 day certificate or one year if you are

107
00:09:31,940 --> 00:09:35,480
going to select this, then it will be paid then.

108
00:09:37,530 --> 00:09:48,330
Next, it will automatically generate one CSR request, so our system is capable of securely creating private CSR

109
00:09:48,330 --> 00:09:49,140
on your behalf.

110
00:09:49,620 --> 00:09:50,430
So what we want.

111
00:09:50,460 --> 00:09:54,300
We want to auto generate when we are going to say next.

112
00:09:55,990 --> 00:10:03,820
Which thing we want in our case, we are going to select this when we are going to select this, when we

113
00:10:03,820 --> 00:10:07,400
are going to say next we will see what will happen.

114
00:10:08,140 --> 00:10:11,710
So in our case, we have already done this step.

115
00:10:12,070 --> 00:10:13,300
So let us see.

116
00:10:13,960 --> 00:10:17,130
So initially you will get this dashboard.

117
00:10:17,800 --> 00:10:20,410
So in our case, it is showing you the step.

118
00:10:20,770 --> 00:10:26,770
what is expiring soon, how many certificates your expiring?.

119
00:10:26,770 --> 00:10:33,610
What is draft, how many has been issued, how many certificates of pending validation.

120
00:10:34,210 --> 00:10:40,510
So what we are going to do, we are going to create a new certificate and please remember it allow you

121
00:10:41,140 --> 00:10:43,900
to create three free certificate.

122
00:10:43,900 --> 00:10:47,310
You can get it for 90 days that it is valid for 90 days.

123
00:10:47,560 --> 00:10:49,060
We just want to experiment.

124
00:10:49,060 --> 00:10:51,980
So 90 days are also sufficient for us.

125
00:10:52,780 --> 00:10:57,040
So what we are going to do, this is the same that I've shown you.

126
00:10:59,160 --> 00:11:05,190
Then it will ask whether 90 day, then we are going to say next step.

127
00:11:06,120 --> 00:11:13,050
So we are going to select the by default, it is already saying selected and we are going to say next.

128
00:11:13,770 --> 00:11:16,670
Now, when we are going to say next, what will happen.

129
00:11:17,130 --> 00:11:21,960
We have to because this domain, might be belong to someone else.

130
00:11:22,470 --> 00:11:25,900
So we have to do the verification.

131
00:11:26,100 --> 00:11:29,070
So a lot of methods are there email verification

132
00:11:29,070 --> 00:11:35,720
that mean, they will send you the email to this account and then you have to verify.

133
00:11:36,270 --> 00:11:39,180
In our case, we are not using email verification.

134
00:11:39,360 --> 00:11:47,000
We are using DNS name that mean it will ask to put certain records in our DNS server.

135
00:11:47,010 --> 00:11:53,470
if the domain name belongs to us, we will be able to put then it will be able to verify.

136
00:11:54,000 --> 00:11:55,530
So we are going to use this.

137
00:11:55,800 --> 00:12:05,250
So when we say click on this what happened, it is saying that sign in to your DNS provider, typically

138
00:12:05,250 --> 00:12:06,510
the register of your domain.

139
00:12:06,690 --> 00:12:13,740
We have already done and put this name and what you should do points to.

140
00:12:14,640 --> 00:12:21,840
And please remember sometimes if you're going to put this, it is going to show the error like in our

141
00:12:21,840 --> 00:12:28,230
case, then please remove this .ocloud.in that mean you have to specify only this portion.

142
00:12:28,410 --> 00:12:36,210
So sometimes even when the instructions are there, you have to adjust according to your where you are

143
00:12:36,210 --> 00:12:40,620
implemented because they have just given generic instruction.

144
00:12:40,860 --> 00:12:45,700
They are not specify how it will work with GoDaddy or some other provider.

145
00:12:46,140 --> 00:12:48,000
So we have to adjust accordingly.

146
00:12:48,270 --> 00:12:55,950
So in our case, we have to leave this .ocloud.in that mean we have to put. Now how we are going to

147
00:12:55,950 --> 00:12:59,150
do, how we have done that mean.

148
00:12:59,670 --> 00:13:03,130
Add record using GoDaddy DNS Manager.

149
00:13:03,600 --> 00:13:05,540
So these five records were there.

150
00:13:05,970 --> 00:13:13,230
So what we did, canonical name we selected from the record, host we specified that initially

151
00:13:13,230 --> 00:13:15,600
whatever it has given, Points to.

152
00:13:16,710 --> 00:13:22,650
Then we did say now what happened, it was showing us these records.

153
00:13:24,850 --> 00:13:28,030
Then we said, please verify that domain..

154
00:13:28,840 --> 00:13:35,040
So when we specify the verified domain name, when we clicked on that domain name, what happened.

155
00:13:37,100 --> 00:13:42,570
It is saying we are unable to verify your cname entry, please check for error on your side.

156
00:13:43,130 --> 00:13:46,240
So in our case, it was not working properly.

157
00:13:46,790 --> 00:13:47,900
So what we did.

158
00:13:49,810 --> 00:13:51,410
We go into the domain manager.

159
00:13:52,120 --> 00:13:52,990
Let me show you.

160
00:13:55,110 --> 00:14:02,580
So what we did in Hosts, we did not specify that ocloud.in, rest of the things were same.

161
00:14:02,760 --> 00:14:10,350
Then again, when we saved that mean little bit adjustments we have to do again when we did that.

162
00:14:13,250 --> 00:14:22,720
That means we've modified that address, that mean we did not specify ocloud.in here, then we saved it

163
00:14:22,730 --> 00:14:31,180
that when we modified the entry and then what it said, congratulation, your domain has been verified.

164
00:14:31,760 --> 00:14:35,320
This means that our system is issuing your certificate at the moment.

165
00:14:35,750 --> 00:14:39,510
This page will refresh automatically every few seconds.

166
00:14:39,860 --> 00:14:45,800
So after some times, it will give you one option download certificate.

167
00:14:46,580 --> 00:14:48,590
So we downloaded the certificate.

168
00:14:51,470 --> 00:14:58,160
We saved it into some directory, so in that directory we said, OK.

169
00:14:59,870 --> 00:15:07,790
After what we have to do, we have to put that downloaded file into our Apache Web servers for that,

170
00:15:08,630 --> 00:15:14,720
what we have to do and in our case, we created one https directory and we.

171
00:15:15,200 --> 00:15:17,500
downloaded that ocloud.in there.

172
00:15:18,290 --> 00:15:22,500
Then what we did, we used one utility secure copy.

173
00:15:22,820 --> 00:15:23,600
Let me show you.

174
00:15:27,560 --> 00:15:29,360
So in our case.

175
00:15:33,610 --> 00:15:36,040
Let me show you the utility that we uses.

176
00:15:38,210 --> 00:15:41,950
This was the utility WinSCP copy how it works.

177
00:15:43,570 --> 00:15:46,840
We do not want new version.

178
00:15:48,180 --> 00:16:00,510
So here we specify the hostname mean our address, it was 52.15.85.32.

179
00:16:01,950 --> 00:16:11,670
And username is your ec2-user, and then we because that machine does not have any password so

180
00:16:11,670 --> 00:16:19,310
advanced, so we authentication,  privatelykey, vipingupta.

181
00:16:20,570 --> 00:16:21,080
OK.

182
00:16:22,700 --> 00:16:23,120
Login.

183
00:16:26,360 --> 00:16:32,650
That means we try to access because we need to copy the data.

184
00:16:33,740 --> 00:16:37,330
So what happened here on our desktop

185
00:16:38,720 --> 00:16:40,940
We created one https folder.

186
00:16:44,620 --> 00:16:53,050
then we clicked on this and we moved this here like, suppose, we have to move some file here,

187
00:16:53,410 --> 00:16:56,110
how we can do we can do in this way.

188
00:16:57,390 --> 00:17:01,260
So this file will go there,same way we did for each.

189
00:17:01,800 --> 00:17:02,940
So what was happening?

190
00:17:03,210 --> 00:17:04,940
This file was there.

191
00:17:05,190 --> 00:17:05,630
It was view.

192
00:17:05,670 --> 00:17:09,330
We were just showing that how this happened then we do not need this.

193
00:17:10,440 --> 00:17:11,220
We can close.

194
00:17:13,490 --> 00:17:21,120
Then again, that mean this was steps, how we perform, we specify this, this is our screen.

195
00:17:22,130 --> 00:17:25,370
So then what we did, we moved this file here.

196
00:17:27,970 --> 00:17:35,890
That file got there, then what we did, we use the unzip utility by using that utility what it did,

197
00:17:36,400 --> 00:17:45,050
it extracted because this contained three files certificate.crt, ca_bundle.crt

198
00:17:45,370 --> 00:17:53,960
and private key then with ls we can verify it now, we need to place these file into the right directory.

199
00:17:54,920 --> 00:17:58,780
So what we command it. again this was for listing those directories.

200
00:18:00,060 --> 00:18:11,820
Then what we did, we open that nano /etc/httpd/conf.d/ssl.conf, then what we did, we

201
00:18:12,360 --> 00:18:13,410
moved those files.

202
00:18:13,440 --> 00:18:15,540
Let me show you how we did.

203
00:18:16,810 --> 00:18:17,140
unzip.

204
00:18:19,860 --> 00:18:23,450
Then we've moved those files, how we moved

205
00:18:23,460 --> 00:18:24,210
those files.

206
00:18:24,240 --> 00:18:25,080
Let me show you.

207
00:18:28,650 --> 00:18:29,850
So let us log in.

208
00:18:38,440 --> 00:18:42,550
Now we are into this directory cd /home/.

209
00:18:44,590 --> 00:18:47,320
ec2-user.

210
00:18:51,100 --> 00:18:55,480
Those files was there and which command we run for moving those files.

211
00:18:55,510 --> 00:18:56,320
Let me show you.

212
00:18:59,150 --> 00:19:00,720
We use certain commands.

213
00:19:00,860 --> 00:19:10,850
This was the command that means we use the command mv ca_bundle.crt certificate.crt,

214
00:19:11,120 --> 00:19:17,310
where we move this, /etc/pki/tls/certs, when we are moving the command or may cutting paste.

215
00:19:17,990 --> 00:19:25,350
So this file got move to this directory, then what was the the next command, we've moved the private

216
00:19:25,410 --> 00:19:25,640
key.

217
00:19:27,080 --> 00:19:33,380
So when we run these commands, like let me show you also.

218
00:19:37,710 --> 00:19:45,750
Let me show you the command ls -l /etc/pki/tls/ one directory is .

219
00:19:49,440 --> 00:19:53,580
your cerficate directory.

220
00:19:56,080 --> 00:20:04,180
These are the moved file, certificate.crt and then you have got this ca_bundle command is.

221
00:20:04,180 --> 00:20:04,450
there.

222
00:20:05,140 --> 00:20:10,140
So we copied that ca_bundle and what was the second directory?

223
00:20:12,250 --> 00:20:12,800
Private.

224
00:20:20,530 --> 00:20:31,320
Then we can open with the vi, which file it /etc/ and with the Nano, two browsers are there, Nano.

225
00:20:33,190 --> 00:20:33,790
http.

226
00:20:35,430 --> 00:20:37,840
conf.d/

227
00:20:38,970 --> 00:20:39,740
ssl.conf.

228
00:20:42,280 --> 00:20:51,850
Now, here's what we did we chaned those file names that mean, let me show you how we did.

229
00:20:54,120 --> 00:21:02,500
Now, look at this, we specified the SSLCertificateChainFile with the name of that file.

230
00:21:03,420 --> 00:21:04,970
Then what about the other files?

231
00:21:06,380 --> 00:21:08,780
This is your SSLCertificateKeyFile.

232
00:21:10,040 --> 00:21:13,780
Then this is your SSLcertificate bundle.

233
00:21:15,440 --> 00:21:22,480
And then this is your certificate file, we saved those.

234
00:21:24,410 --> 00:21:25,220
Let me show you.

235
00:21:28,140 --> 00:21:36,450
So this was the that mean when we viewed the files, then we open that file again, when we

236
00:21:36,450 --> 00:21:43,850
checked that that mean all the files are at relevant place, then systemctl restart httpd.

237
00:21:45,780 --> 00:21:49,980
Then you can verify whether everything is working properly or not.

238
00:21:50,250 --> 00:21:51,390
And let us verify.

239
00:21:52,410 --> 00:21:56,430
So what we can do, we can specify.

240
00:21:58,640 --> 00:22:00,560
https://

241
00:22:05,140 --> 00:22:13,690
Now, look at this secure site is running, you can verify that connection is secure, you can verify.

242
00:22:16,710 --> 00:22:25,020
That mean all the details are there, so now we want to check with the whether ocloud.in

243
00:22:25,020 --> 00:22:25,910
it will work or not.

244
00:22:30,550 --> 00:22:37,840
That is also working that mean that is how we can implement, in our case, your webserver is running

245
00:22:37,840 --> 00:22:46,120
on ec2 instance on AWS cloud, then we are relating that domainname that we have purchased

246
00:22:46,120 --> 00:22:47,110
from GoDaddy.

247
00:22:47,680 --> 00:22:53,520
We made entry there, then we created a certificate from SSL for free.

248
00:22:53,530 --> 00:22:58,310
It was very simple way of creating that mean it was very easy.

249
00:22:58,600 --> 00:23:06,300
So we have relate three different that mean AWS cloud, GoDaddy and then certificate and it is working perfectly.

250
00:23:06,880 --> 00:23:11,800
And once you have done that, also what you can do.

251
00:23:12,130 --> 00:23:13,910
Let me show you one thing and.

252
00:23:14,920 --> 00:23:21,370
again Let me show you the in slides that means we were able to confirm.

253
00:23:23,830 --> 00:23:32,500
And again, on that site, there was one option also, once the installation is complete, what you

254
00:23:32,500 --> 00:23:37,510
can do it automatically verifies that also, let me show you.

255
00:23:40,450 --> 00:23:46,420
That mean install certificate check installation after check installation, what will happen

256
00:23:47,080 --> 00:23:51,550
once you have done the check installation, you will get this option.

257
00:23:54,400 --> 00:24:01,090
Installation complete, congratulations, you have successfully installed your SSL certificate and then

258
00:24:01,090 --> 00:24:02,500
you can create a new one.

259
00:24:03,720 --> 00:24:07,870
This is the final screen that you are going to get 90 days SSL.

260
00:24:09,730 --> 00:24:18,310
So what you can do, you can revoke this certificate if your certificate has got compromised so let

261
00:24:18,310 --> 00:24:19,150
me cancel this.

262
00:24:21,190 --> 00:24:25,230
So this is the certificate, what you can do if it is compromised.

263
00:24:27,500 --> 00:24:33,740
You can download that also, but you can specify you can revoke that certificate.

264
00:24:33,770 --> 00:24:37,010
Also, it is showing you the revoke option.

265
00:24:41,140 --> 00:24:42,600
We do not want any help.

266
00:24:45,980 --> 00:24:48,520
So it is showing download certificate.

267
00:24:48,720 --> 00:24:49,330
So this is visible.

268
00:24:52,890 --> 00:24:53,310
This is.

269
00:24:57,170 --> 00:25:02,570
revoke certificate, but we are not going to do that because still it is valid certificate.

270
00:25:03,290 --> 00:25:10,170
That is how we relate all the things if you do not want the machines, later on, what you can do.

271
00:25:10,850 --> 00:25:17,280
Action in instance state, what you can do, you can terminate the instance.

272
00:25:17,750 --> 00:25:22,760
And regarding domain manager, what you can do if you want to remove these record.

273
00:25:23,600 --> 00:25:27,950
So when you are going to click on this, you can delete it here.

274
00:25:27,960 --> 00:25:35,690
In sameway if you want to delete the entries or other things of this record, again, what you can do,

275
00:25:35,760 --> 00:25:36,180
do it.

276
00:25:36,530 --> 00:25:38,620
But we are not going to do this.

277
00:25:38,900 --> 00:25:41,200
So again, these were optional videos.

278
00:25:41,210 --> 00:25:45,700
Please, just for because on request, we are getting a lot of requests.

279
00:25:46,400 --> 00:25:48,450
And so we created those.

280
00:25:48,470 --> 00:25:49,910
Again, these are optional.

281
00:25:50,000 --> 00:25:51,460
Go for these video.

282
00:25:51,470 --> 00:26:01,400
Only if you are comfortable with using some cloud services, where you can host your domain name

283
00:26:01,880 --> 00:26:03,950
then how to create the certificate.

284
00:26:03,950 --> 00:26:09,110
But just for knowledge, even if you are going to view the videos, it will help you.

285
00:26:09,320 --> 00:26:12,380
How you can do that practical.

286
00:26:12,920 --> 00:26:19,610
And please remember, if you are going to look at again now, whatever we did in the local lab, it

287
00:26:19,610 --> 00:26:21,060
was not much difference that.

288
00:26:21,140 --> 00:26:27,920
Same way we were installing the software, same way we were creating and adding on that we were

289
00:26:27,920 --> 00:26:35,900
not using the DNS server, we were using that you can say host file, which was acting as a DNS

290
00:26:36,080 --> 00:26:37,370
type of server there.

291
00:26:37,390 --> 00:26:39,850
Also, we created our secure site also.

292
00:26:40,070 --> 00:26:45,010
So in the Internet a little bit things are different.

293
00:26:45,410 --> 00:26:48,590
So that was our how to relate those.

294
00:26:49,760 --> 00:26:55,790
You can say how to create your secure Web site by using third party software.