Tag Info

Hot answers tagged

4

StartCom issues free signed SSL certificates. You can create and sign your own certificates from any computer with openssl. This is not a programming question and doesn't belong on StackOverflow.


3

The problem is because you have some of the images hard-coded to load through http protocol on your index page. You should change the links to be protocol-agnostic by using //, e.g.: <img src="http://example.com/image.png"> Change with: <img src="//example.com/image.png"> These links will make content load through https if site is also ...


2

Node.js can handle certificates in multiple formats, but the most common and easiest to set up is the PEM format used by Apache, nginx, etc. It doesn't matter much what you request from NetSol, as long as it is not IIS, which uses a completely different format. The only real hangup you may run into is with the intermediate CA certificates, which NetSol has ...


2

Actually your website has a problem of using insecure SSL ciphers. You should configure the ciphers in your web server like this: ssl_prefer_server_ciphers On; ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS; Credit for the ...


2

If you want a certificate which is going to be trusted by most user's browsers (eg. chrome/firefox) then yes, you will have to pay for that. As for SSL with payments, yes, this is crucial. If you cannot set up SSL you should not take payments, rather try to use a 3rd party to do payment processing. You are welcome to generate your own certificates. You ...


1

It's a common mistake to think that when you create your own SSL certificate they are self-signed. You can also create your own CA, and sign your certificates with it (yeah, the CA certificate will be self signed too, but so are the "real" CA certificates - every certificate chain is started by the CA certificate, and CA is created from scratch). The main ...


1

It's important to understand that SSL certificates come in two "flavors": Self-signed - In which case, you generate them entirely on your own with no additional cost. CA-signed - In which case, a recognized certificate authority (Symantec, GeoTrust, GoDaddy, etc) signs the cert. Is this a public facing website? If so, then I'd strongly suggest ...


1

You need to fix 2 things: First make sure the DN (distinguished name) is your server name, in my case 'localhost' Restart Apache I wasn't restarting Apache which took me awhile to realize is necessary. And it wasn't clear that DN was where I needed to stuff the hostname. Normally, as far as I could tell, DN is used for your personal name.


1

GoDaddy does not support installing self-signed SSL certificates in shared web hosting accounts, as can be confirmed from this thread: Does shared hosting support installing self-signed certificates?. GoDaddy's shared web hosting accounts use a custom control panel (not cPanel, Plesk, etc...) that doesn't provide the option to install SSL certificates. ...


1

Generally no they are not and they are not recommended either to be used in general. The reason is that they can't be validated or reasonably confirmed to be valid. There is no certificate authority that can vouch for it, such as Verisign, GeoTrust, or even GoDaddy itself. The trust attributed to a certificate is mainly who has vouched for it and how it was ...


1

If you can install a certificate for your domain, then you can install as many certs as you like, so long as they are from different CAs. Issues usually arise when you want one cert or one CA to cover multiple domains and subdomains on the same server. If you are not scared of the warnings because you are already familiar with your server configuration, you ...


1

This might help you: https://www.ssllabs.com/ssltest/analyze.html?d=yourwebsite.com I recently used this to test security. This returns which protocals are used, possible vulnarebilities, keylengths and certificate chain order. They give you all sorts of information, very useful, I recommend this for everyone, just do a simple check, it's free and only ...



Only top voted, non community-wiki answers of a minimum length are eligible