Configuring comodo ssl for ec2 instance

What is CA bundle - SSL Certificate ?

CA bundle is a file which contains root certificate and intermediate certificate.
It is for domain constitues certificates chain with CA bundle.

Comodo may provide you complete CA bundle file or provide you root and intermediate certificates separately.

Comodo provides the following 3 files.

domain.cer - Domain Certificate
COMODORSADomainValidationSecureServerCA.cer  - Intermediate certificate 2
COMODORSAAddTrustCA.cer - Intermediate certificate 1
AddTrustExternalCARoot.cer - Root Cert


You must use the correct order.

cat www_example_com.crt COMODORSADomainValidationSecureServerCA.crt  COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt > ssl-bundle.crt

server {
    listen 443;

    ssl on;
    ssl_certificate /etc/nginx/ssl/example_com/ssl-bundle.crt;
    ssl_certificate_key /etc/nginx/ssl/example_com/example_com.key;

}