How to set up SSL for your knowledge base with Apache
Configuring your white-labeled Knowledge Base for SSL and HTTPS lets your customers know the information they share online will be secure.
You can set up SSL for your white-labeled Knowledge Base domain with a reverse proxy server using Apache or Cloudflare.
Read about setting up SSL with Cloudflare here: Add HTTPS to your white-labeled Knowledge Base and chat link
To enable SSL with Apache, you’ll first need to obtain your own SSL certificate.
Here are the steps:
(tested in a Virtualmin environment with Apache/PHP 7.4 on Ubuntu 20.04)
1 - Create an "A" record for your domain and point it to your own Apache web server.
2 - Create a virtual server (or sub server) using your selected domain. Include SSL site in the options.
3 - Get an SSL certificate and private key from a trusted certificate authority for your newly created site.
You can get a free SSL certificate from Let’s Encrypt, an open Certificate Authority from the Internet Security Research Group (ISRG) and the Linux Foundation.
4 - Under Server Configuration, edit the proxy server to enable the Proxy and add http://custom.tawk.help/ as the URL. Do not use HTTPS, as this will cause an SSL error.
5 - Finally, manually edit your new virtual server Apache.conf file and add the following:
ProxyPreserveHost: on
SSLProxyEngine: on
SSLProxyVerifyDepth: 10
SSLProxyCheckPeerCN: off
SSLProxyCheckPeerName: off
Here’s a sample configuration:
Substitute the details for your custom domain and SSL certificate
xxxxxxxxxx<VirtualHost *:80>ServerName your.domain.hereRedirectMatch (.*) https://your.domain.here</VirtualHost> <IfModule mod_ssl.c> <VirtualHost *:443>ServerName your.domain.here SSLEngine onSSLCertificateFile /path/to/your/certificate.cerSSLCertificateKeyFile /path/to/your/private.keySSLCertificateChainFile /path/to/your/intermadiate/chain.key # Proxy SSL optionsSSLProxyEngine onSSLProxyVerifyDepth 10SSLProxyCheckPeerCN offSSLProxyCheckPeerName off # Preserve `host` header to send `your.domain.here` to server handling `custom.tawk.help`ProxyPreserveHost On # Send all traffic to `custom.tawk.help`ProxyPass / https://custom.tawk.help/ProxyPassReverse / https://custom.tawk.help/</VirtualHost> </IfModule>With SSL enabled and an HTTPS protocol, your Knowledge Base will be a secure site your customers will visit and search with confidence.
Need additional support setting up SSL for your white labeled Knowledge Base? Schedule a call with a member of the tawk.to support team here: Schedule a call