Tag Info

Hot answers tagged

2

Actually your website has a problem of using insecure SSL ciphers. You should configure the ciphers in your web server like this: ssl_prefer_server_ciphers On; ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS; Credit for the ...


2

Node.js can handle certificates in multiple formats, but the most common and easiest to set up is the PEM format used by Apache, nginx, etc. It doesn't matter much what you request from NetSol, as long as it is not IIS, which uses a completely different format. The only real hangup you may run into is with the intermediate CA certificates, which NetSol has ...


1

It's a common mistake to think that when you create your own SSL certificate they are self-signed. You can also create your own CA, and sign your certificates with it (yeah, the CA certificate will be self signed too, but so are the "real" CA certificates - every certificate chain is started by the CA certificate, and CA is created from scratch). The main ...


1

It's important to understand that SSL certificates come in two "flavors": Self-signed - In which case, you generate them entirely on your own with no additional cost. CA-signed - In which case, a recognized certificate authority (Symantec, GeoTrust, GoDaddy, etc) signs the cert. Is this a public facing website? If so, then I'd strongly suggest ...


1

GoDaddy does not support installing self-signed SSL certificates in shared web hosting accounts, as can be confirmed from this thread: Does shared hosting support installing self-signed certificates?. GoDaddy's shared web hosting accounts use a custom control panel (not cPanel, Plesk, etc...) that doesn't provide the option to install SSL certificates. ...


1

Generally no they are not and they are not recommended either to be used in general. The reason is that they can't be validated or reasonably confirmed to be valid. There is no certificate authority that can vouch for it, such as Verisign, GeoTrust, or even GoDaddy itself. The trust attributed to a certificate is mainly who has vouched for it and how it was ...


1

When I want test a SSL connection with a website I use openssl Generate the key openssl genrsa -out server.key 1024 Generate csr file openssl req -new -key server.key -out server.csr Generate the certificate openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt And now you can use with Apache



Only top voted, non community-wiki answers of a minimum length are eligible