Comment by thehairyone

a2enmod headers

echo -e "ServerSignature Off\nServerTokens Prod" >> /etc/apache2/apache2.conf

/etc/init.d/apache2 restart

openssl req -new -nodes -keyout webappsec-test.info.key -out webappsec-test.info.csr -newkey rsa:2048

cat webappsec-test.info.csr

Register here:

https://www.startssl.com/

Copy and paste csr...

cat Domain_cert.pem CA_root.pem

https://mozilla.github.io/server-side-tls/ssl-config-generat...

====>

A+ on

https://www.ssllabs.com/

Now? What's so hard about that?

I guess if you're using EC2 and Ubuntu on your server... ehhh...