Doubt regarding the https protocol

Question

I am setting up an Apache server in Debian.

When accessing https://.../index.php by Chrome , I have the following result:

So my doubts are:

1. To appear :

I necessarily need a paid certificate, or is there another way?

2. Not to appear the browser alert, a path would redirect the https to the http, this is possible in Apache?

Answer 1

Each different browser has a list of the certificates it trusts. In general, all paid certificates are considered reliable by the major browsers. For free certificates, you will have variations.

The best known of the free certifiers should be Let’s Encrypt. They have a page listing which browsers rely on your certificate.

Note that most browsers and other software rely on them. Only a few large players in the market lack confidence (such as Windows Live Mail).

To change the access protocol to your page, it is possible to do it in a very simple way. I am not an expert in Apache but with . htaccess or similar you can do a server-side redirect, that’s enough. Just note that, without https, all traffic to your site can be read by intermediaries.

Answer 2

You can put a free certificate, know: Let’s Encrypt is a free, Automated, and open Certificate Authority

Install Install Let’s Encrypt to Create SSL Certificates

Setting up for Apache SSL Certificates with Apache on Debian & Ubuntu

HTTPS redirect to HTTP (.htaccess) RewriteEngine On RewriteCond %{HTTPS} on RewriteRule (.*) http://%{HTTP_HOST}%{REQUEST_URI}