Description
This course is all about securing websites with SSL/TLS certificates.
Become a master of HTTPS, Let's Encrypt, Cloudflare, NGINX and SSL/TLS Certificates.
This is the most complete practical SSL guide here on Udemy that includes tons of practical activities. All practice exercises are performed on a real domain and real hosting and finally you will get production ready solution with HTTPS setup and redirection of HTTP to HTTPS. You can have zero knowledge about computer networks, encryption, configuration of web servers. All will be taught from scratch, from simple setup to complex solution. If you want to get deep knowledge of SSL and HTTPS this course is for you!
We will start by exploring basics of symmetric encryption algorithms like AES, asymmetric encryption RSA, hashing protocols MD5 and SHA. Also I will explain you fundamentals of computer networks, TCP/IP stack and for that we will use Wireshark traffic analyzer.
You will learn what is the structure of the SSL/TLS certificate. Also you will understand why CAs (Certificate Authorities) are needed and how chain of trust is built.
In practice sections we will perform multiple practice activities:
Buy a domain and configure DNS settings
Use Certbot ACME client to automatically obtain free SSL certificate from Let's Encrypt
With help of OpenSSL generate RSA keys, self-signed certificates
Secure Wordpress with Apache using SSL/TLS certificates
Create CSR (Certificate Signing Request) by OpenSSL and submit CSR to CA server
Configure Cloudflare for your domain and setup different SSL modes of operations
Install and configure NGINX web server for SSL/TLS certificates
Migrate from HTTP to HTTPS
Redirect all traffic using HTTP 301 redirect from HTTP to HTTPS
With this course you will get lifetime-long access to 100 lectures and tens of practical exercises. After the course you will become a guru of SSL and TLS encryption and will be able easily obtain and install SSL certificates on your web servers.
You will also get 30-days money-back guarantee. No questions asked!
Don't wait and join the course now!
Who this course is for:
- Owners of any websites
- DevOps Engineers
- Web developers
- Network Engineers
- JavaScript developers
Course content
- Intro
- Introduction to the HTTPS and TLS
- Section 1 Introduction
- Overview of researches dedicated to SSL, TLS and HTTPS
- Overview of the certificates of some popular websites
- Difference between HTTP and HTTPS
- Analyzing traffic using Wireshark
- TCP/IP stack by example
- Analyzing HTTP protocol using Wireshark
- Analyzing HTTPS and TLS using Wireshark
- Encryption and hashing overview
- Section 2 Introduction
- Symmetric Key Encryption
- Symmetric Key Encryption Algorithms
- Hashing Overview
- MD5 hashing algorithm
- SHA hashing algorithm and HMAC overview
- Asymmetric keys overview
- Encryption using asymmetric keys
- Signing data using assymmetric keys
- RSA Overview
- PKI - Public Key Infrastructure Overview
- Certificate overview
- RSA, Certificates and Chain of Trust
- Section 3 Introduction
- Installing OpenSSL
- Using OpenSSL for RSA keys generation
- Exploring certificate of Instagram
- Exploring certificate of Google
- Exploring certificate of Comodo
- Root CA and root certificates in the OS
- How Chain of Trust is built
- Verifying chain of certificates
- Verifying SSL certificate and certificates chain
- PKI, Chain of trust and certificates summary
- Certificate domain scopes
- SSL, TLS and HTTPS
- Section 4 Introduction
- Introduction to the SSL and TLS
- History and versions of the SSL and TLS
- Why RSA is not used for data encryption in HTTPS
- How TLS session is established
- Analyzing TLS session setup using Wireshark
- Overview of cipher suites
- Encryption key generation by the web browser
- Delivering encryption key using Diffie Hellman key exchange
- Diffie Hellman overview
- Modulus operation
- Diffie Hellman algorithm
- Elliptic Curve Cryptography Overview
- Point Addition on Elliptic Curve
- Multiple Point Addition
- Point Doubling and Optimization
- Elliptic Curve Discrete Log Problem
- Comparing formulas
- ECDHE - Elliptic Curve Diffie Hellman Exchange
- Exploring ECDHE with ECDSA
- Launching TLS secured website with free domain and hosting
- Section 5 Introduction
- Free domains overview
- Setting up free domain and hosting using GitHub Pages
- Exploring TLS session with our website at Github.io - PART 1
- Exploring TLS session with our website at Github.io - PART 2
- Custom domain with free hosting
- Section 6 Introduction
- Planning next steps with Paid Domain
- Buying a domain
- Setting up free hosting
- Overview of the TLS settings at the free hosting
- OPTIONAL - Trying to install free Let's Encrypt TLS certificate on free hosting
- Free TLS certificate (Let's Encrypt) at paid hosting
- Section 7 Introduction
- VPS vs Dedicated Server
- Hosting Services Overview - PART 1
- Hosting Services Overview - PART 2
- Buying a droplet at DigitalOcean
- Launching Wordpress website with HTTPS
- Exploring our brand new TLS Certificate
- Finishing Wordpress installation
- Let's Encrypt and Certbot Overview
- Exploring TLS certificates via shell
- Exploring certbot configuration and testing renewal
- What we have got so far
- Cloudflare with free TLS certificate
- Section 8 Introduction
- Reverse Proxy and Cloudflare
- Overview of the current setup
- Moving our website to Cloudflare
- Exploring free TLS certificate from Cloudflare
- Exploring TLS settings at Cloudflare
- Cloudflare SSL Operation Modes
- Flexible SSL Operation Mode at Cloudflare
- Off SSL Operation Mode at Cloudflare
- Configuring NGINX web server and installing TLS certificate
- Section 9 Introduction
- Current Setup and planning next steps
- Installing Nginx web server
- Configuring Nginx web server
- Setting up Cloudflare Origin TLS certificate
- Cloudflare summary
- Disable Cloudflare
- Creating self-signed certificate using OpenSSL
- Section 10 Introduction
- Current Nginx server setup overview
- CSR - Certificate Signing Request
- Generate Self-Signed certificate using OpenSSL
- Self-signed certificate overview
- Cloudflare and self-signed certificate
- Getting and installing custom certificate
- Section 11 Introduction
- Paid certificates overview
- Getting 90-days valid free TLS certificate
- Installing Custom TLS Certificate
- Analyzing our new custom TLS Certificate
- Our TLS Setup is not complete
- Installing TLS certificate of intermediate CA
- HTTP and HTTPS versions of website
- Configuring 301 Redirects to HTTPS
- Custom TLS Certificate Summary
- Cleanup
SSL.Complete.Guide.HTTP.to.HTTPS.part1.rar
SSL.Complete.Guide.HTTP.to.HTTPS.part2.rar
Themelli |
