SSL Certs In The New IE 7
Jan 2, 2007I am receiving a cert error and the bar turns red after I continue on saying it is not a trusted site. What do I need to do to have it turn green?
View 3 RepliesI am receiving a cert error and the bar turns red after I continue on saying it is not a trusted site. What do I need to do to have it turn green?
View 3 Repliesyou can get really cheap ones, like $20/year, but you can also get really expensive ones, I've seen over 1k per year.
What is the difference between these? Right now I just use self signed but eventually I'll probably want to get a "real" one to suppress all the warnings. (newer browsers are bad for that, they make it look like the site is down, to a typical user).
One of my sites is currently hosted on an IIS server. It has an SSL certificate that the host has setup and they've placed a .PFX file for that certificate in my root directory.
I would like to transfer that site to my new server that runs cPanel/WHM. What is the easiest way to go about doing this? Do I require the co-operation of my previous (IIS) host to do it, or can I do it on my own? And is there a simple way to do it since I have cPanel/WHM installed?
I am trying to install my SSL certifcate from godaddy onto my godaddy dedicated server.
I already called them, and followed their instructions on re-keying and I think I did it all correctly.
After the process, four files were generated:
mydomain.com.crt
mydomain.key
mydomain.csr
gd_intermediate_bundle.crt
I noticed that the directory for my website contained a 'public_html' folder and a 'certs' folder. So, naturally, I moved them all to the 'certs' folder.
/home/myusername/certs/
The instructions then said to edit ssl.conf, which I found in /etc/httpd/conf.d/
They said to ADD these 3 vague directives:
SSLCertificateFile /pathtoyour/certificate/file
SSLCertificateKeyFile /pathtoyour/key/file
SSLCertficateChainFile /pathto/gd_intermediate_bundle/file
My ssl.conf already contained similar directives, but they pointed to what looked like server defaults. Since the instructions said to add the directives, I simply added them underneath what was already there. Not exactly sure which file is which, I guessed, here is what I added:
SSLCertificateFile /home/myusername/certs/mydomain.com.crt
SSLCertificateKeyFile /home/myusername/certs/mydomain.key
SSLCertficateChainFile /home/myusername/certs/gd_intermediate_bundle.crt
Then, the instructions said to restart Apache.
Here is where my trouble is. Apache won't restart! (This is Apache 2 by the way.)
I went to the ssl.conf file and commented out my 3 directives.
Apache successfully restarted! So, I tried adding my 3 directives back in and this time commenting out the two default directives that looked similar.
The lines were:
SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key
I tried again, and Apache again failed to start!
I tried contacting godaddy, they escalated the issue, and I saw them poking around my server this morning. They left my Apache turned off when they logged out. So I decided it was time to put my website back up (I need this thing running, you know?) and ask for help so I can do this myself.
What did I do that is causing Apache to not start up?
While I can’t really comment on the quality of SSL cert that GoDaddy provides, I can attest to the fact that GoDaddy does provide cheap, easy to install, SSL certs. All the SSL certs that I have are provided by GoDaddy and I do plan to continue doing so unless I find out that their SSL certs aren’t comparable to other SSL certs with the same protection e.g. 128 bit encryption.
The bottom line is, if you want a cheap, fairly simple SSL choice, then you may find GoDaddy to be a solid choice.
Where can I find the cheapest wildcard SSL certificates?
View 14 Replies View RelatedI have installed a new SSL cert and tried to assign it to an IP address.
Plesk says "Information: The properties of the IP address .... were changed."
But it seems the SSL cert was not changed.
Running in mysql the following query
select d.name from domains d inner join hosting h on h.dom_id = d.id where h.certificate_id = <id of new cert>;
gives:
Empty set (0.00 sec)
I changed the cert for the IP where all my domains are so it should show the domains using that IP/cert. Running the query using the ID of the old cert lists all the domains on that IP/cert.
Just received a new set of signed certs and trying to implement these on a Win2k3 x86 system with the ApacheLounge 2.2.29 1.0.1l build it won't start up, not log anything in error log. httpd -t doesn't return any issues, using the same key/cert with the openssl s_server is OK.
View 2 Replies View Related