Using StartSSL Certificates: Difference between revisions
No edit summary |
No edit summary |
||
| (2 intermediate revisions by one other user not shown) | |||
| Line 8: | Line 8: | ||
2.) Choose to create a web certificate. | 2.) Choose to create a web certificate. | ||
3.) StartSSL will create an encrypted private key first. Be sure to make note of what you choose for a password. For Example 'abcdefghij' (You will need this in the | 3.) StartSSL will create an encrypted private key first. Be sure to make note of what you choose for a password. For Example 'abcdefghij' (You will need this in the RangerMSP interface) | ||
Download the encrypted private key and save it to your computer. | Download the encrypted private key and save it to your computer. | ||
4.) Continue in StartSSL to request your certificate. There may be a delay of several hours but it usually comes very quick. | 4.) Continue in StartSSL to request your certificate. There may be a delay of several hours but it usually comes very quick. | ||
5.) While you are waiting, Go back to the StartSSL toolbox and choose to decrypt the private key you just created. | 5.) While you are waiting, Go back to the StartSSL toolbox and choose to decrypt the private key you just created. RangerMSP can only use the decrypted version. | ||
Save the decrypted key as key.pem | Save the decrypted key as key.pem | ||
| Line 21: | Line 21: | ||
Note: You may want to try with a few test certs (test1.mycompany.com) because if you screw up, you might burn a good cert name like clients.mycompany.com. | Note: You may want to try with a few test certs (test1.mycompany.com) because if you screw up, you might burn a good cert name like clients.mycompany.com. | ||
==See Also== | ==See Also== | ||
| Line 26: | Line 27: | ||
*[[Troubleshooting]] | *[[Troubleshooting]] | ||
*[[Using SSL with Web Interface]] | *[[Using SSL with Web Interface]] | ||
*[https://konklone.com/post/switch-to-https-now-for-free Using StartSSL on Servers] (konklone.com) | |||
[[Category:Installation]] | [[Category:Installation]] | ||
[[Category:Web Interface]] | [[Category:Web Interface]] | ||
Latest revision as of 13:54, 8 July 2020
Contributed by: Rick Cassel
Instructions for using free StartSSL.com Class 1 Cert.
1.) Sign up for an account at StartSSL.com to get free class1 SSL certs. You'll need to generate a personal key and install it to your browser to authenticate with the StartSSL.com website (beyond the scope of this document). It's clearly documented on their website.
2.) Choose to create a web certificate.
3.) StartSSL will create an encrypted private key first. Be sure to make note of what you choose for a password. For Example 'abcdefghij' (You will need this in the RangerMSP interface) Download the encrypted private key and save it to your computer.
4.) Continue in StartSSL to request your certificate. There may be a delay of several hours but it usually comes very quick.
5.) While you are waiting, Go back to the StartSSL toolbox and choose to decrypt the private key you just created. RangerMSP can only use the decrypted version. Save the decrypted key as key.pem
6.) The cert provided by StartSSL is already in .pem format. Simply save a copy with the .pem extension. (cert.crt -> cert.pem) Save it as .crt to import into your browser.
7.) You can get the root and and intermediate certificate you need directly from the StartSSL website in the toolbox area. It's already in PEM format so simply save it as PEM. (Note:you will need to install the intermediate key in your browser.
Note: You may want to try with a few test certs (test1.mycompany.com) because if you screw up, you might burn a good cert name like clients.mycompany.com.