|
[HowTo] Create your own SSL CA and secure multiple services
|
| Author |
Message |
rsmithgs
Junior Member
Posts: 173
Group: Registered
Joined: Apr 2007
Status:
Offline
Reputation: 1
|
RE: [HowTo] Create your own SSL CA and secure multiple services
http://www.cacert.org/
Dont quite know how reconised the certificates are though.
Think some dedicated server providers do free SSL certs with packages. But they have to remain with that server.
I'm using VHCS and want to change to something better. ispCP Omega is looking to be the answer.
|
|
| 04-03-2008 04:59 AM |
|
 |
DaSilva
Junior Member
Posts: 163
Group: Registered
Joined: Dec 2007
Status:
Offline
Reputation: 0
|
RE: [HowTo] Create your own SSL CA and secure multiple services
This cacert gives me a free certificate after the successful test or what?
|
|
| 04-03-2008 06:01 AM |
|
|
rsmithgs
Junior Member
Posts: 173
Group: Registered
Joined: Apr 2007
Status:
Offline
Reputation: 1
|
RE: [HowTo] Create your own SSL CA and secure multiple services
Dunno.
I would try and check to see what percentage of browsers will see the certificate as a valid one. Otherwise your back to square one.
Edit : Found this on the site
(*) Please note a general limitation is that, unlike long-time players like Verisign, CAcert's root certificate is not included by default in mainstream browsers, email clients, etc. This means people to whom you send encrypted email, or users who visit your SSL-enabled web server, will first have to import CAcert's root certificate, or they will have to agree to pop-up security warnings (which may look a little scary to non-techy users).
Which would be the same for your self signed certificates.
Though by spreading CAcerts instead of your self signed ones you are helping the spread of the CAcert Root certificate
I'm using VHCS and want to change to something better. ispCP Omega is looking to be the answer.
This post was last modified: 04-03-2008 06:49 AM by rsmithgs.
|
|
| 04-03-2008 06:20 AM |
|
|
DaSilva
Junior Member
Posts: 163
Group: Registered
Joined: Dec 2007
Status:
Offline
Reputation: 0
|
RE: [HowTo] Create your own SSL CA and secure multiple services
I know have a certificate from StartSSL but I don't know how to implement it to my server because I only have a *.crt , a *.csr and a *.key file but no *.pem .
How can I use this now?
Thanks.
|
|
| 04-04-2008 06:49 PM |
|
|
rsmithgs
Junior Member
Posts: 173
Group: Registered
Joined: Apr 2007
Status:
Offline
Reputation: 1
|
RE: [HowTo] Create your own SSL CA and secure multiple services
I know have a certificate from StartSSL but I don't know how to implement it to my server because I only have a *.crt , a *.csr and a *.key file but no *.pem .
How can I use this now?
Thanks.
I think you can copy your *.crt and rename the copy *.pem
I'm using VHCS and want to change to something better. ispCP Omega is looking to be the answer.
|
|
| 04-04-2008 07:06 PM |
|
|
Cube
Documentation Team
Posts: 573
Group: Docu Team
Joined: Apr 2007
Status:
Offline
Reputation: 7
|
RE: [HowTo] Create your own SSL CA and secure multiple services
But StartSSL is not trusted as well as far as I see.
|
|
| 04-04-2008 08:14 PM |
|
|
rsmithgs
Junior Member
Posts: 173
Group: Registered
Joined: Apr 2007
Status:
Offline
Reputation: 1
|
RE: [HowTo] Create your own SSL CA and secure multiple services
But StartSSL is not trusted as well as far as I see.
That does look like the case.
If you do not want the certificate errors to appear in the web browser and are looking to get a certificate for free you will need to get the clients to install your certificate on the PC they are using. TO get a reconised certificate you will need to pay money.
I'm using VHCS and want to change to something better. ispCP Omega is looking to be the answer.
|
|
| 04-04-2008 08:46 PM |
|
|
fulltilt
Member
Posts: 474
Group: Registered
Joined: Apr 2007
Status:
Offline
Reputation: 3
|
RE: [HowTo] Create your own SSL CA and secure multiple services
error by certificate generation
if i use:
openssl genrsa -out apache.key.pem -rand private/.rand 2048
openssl req -new -key apache.key.pem -out apache.req.pem
openssl ca -name RootCA -in apache.req.pem -out apache.cert.pem
i get this error in last step openssl ca:
Using configuration from /usr/lib/ssl/openssl.cnf
variable lookup failed for RootCA::private_key
21745:error:0E06D06C:configuration file routines:NCONF_get_string:no value:conf_lib.c:329:group=RootCA name=private_key
Regards
OS : Debian 4.0 Etch 32bit
ispCP Version:1.0.0 RC3 [20080203]
Activated : AWStats static
|
|
| 05-20-2008 03:28 AM |
|
|
|
|
Search
Member List
Calendar
Help
