Enable SSL for Owncloud 8 on Ubuntu

This was tested on Ubuntu Server Ubuntu 14.04.2 LTS x64 running Owncloud 8.0.4

1. Ensure you have ssl installed in Ubuntu

$ sudo apt-get install openssl

2. Enable the ssl and rewrite modules in apache2 :

$sudo su -
#a2enmod ssl
#a2enmod rewrite

3. Create a ssl directory inside /etc/apache2

# mkdir -p /etc/apache2/ssl

4. Create self signed ssl certificate. Fill the info as you wish. I’ve made the certificate valid for 10 years (3650 days).

# openssl req -new -x509 -days 3650 -nodes -out /etc/apache2/ssl/owncloud.pem -keyout /etc/apache2/ssl/owncloud.key

5. Edit Owncloud config file :

#nano /etc/apache2/conf-enabled/owncloud.conf

Change from :

Alias /owncloud "/var/www/owncloud/"
<Directory "/var/www/owncloud">
    Options +FollowSymLinks
    AllowOverride All

    <IfModule mod_dav.c>
      Dav off
    </IfModule>

    SetEnv HOME /var/www/owncloud
    SetEnv HTTP_HOME /var/www/owncloud
</Directory>

<Directory "/var/www/owncloud/data/">
  # just in case if .htaccess gets disabled
  Require all denied
</Directory>

to the config below. Replace 192.168.0.16 with your server’s IP address.
The highlighted text is the original config that must be left untouched.

#Listen 443
#uncomment and change the above only for other ports

 <VirtualHost 192.168.0.16:80>
RewriteEngine on
ReWriteCond %{SERVER_PORT} !^443$
RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [NC,R,L]
</VirtualHost>

<VirtualHost 192.168.0.16:443>
SSLEngine on
SSLCertificateFile /etc/apache2/ssl/owncloud.pem
SSLCertificateKeyFile /etc/apache2/ssl/owncloud.key
DocumentRoot /var/www/owncloud/

Alias /owncloud "/var/www/owncloud/"
<Directory "/var/www/owncloud">
    Options +FollowSymLinks
    AllowOverride All

    <IfModule mod_dav.c>
      Dav off
    </IfModule>

    SetEnv HOME /var/www/owncloud
    SetEnv HTTP_HOME /var/www/owncloud
</Directory>

<Directory "/var/www/owncloud/data/">
  # just in case if .htaccess gets disabled
  Require all denied
</Directory>
</VirtualHost>

Restart Apache webserver.

#service apache2 restart

That’s it. All Owncloud connections will use SSL encryption.
Modify all desktop and mobile client settings to use https instead of http when accessing Owncloud.

To make your Owncloud accept connections from outside your home network, you must do the additional steps below :

7. Forward port 443 on your router to 192.168.0.16 port 443. If you used another port in the owncloud.conf file, make sure it’s the same as here.

8. Edit /var/www/owncloud/config/config.php and change the trusted domains section from :

'trusted_domains' =>
array (
0 => '192.168.0.16',
),

to

'trusted_domains' =>
array (
0 => '192.168.0.16',
1 => '89.90.91.92',
),

89.90.91.92 is a new IP allowed to connect to Owncloud and 192.168.0.16 is the Ubuntu server’s IP.

From outside, Owncloud will be accessible by using the following adress https://your-public-home-ip:443/owncloud