Differences

This shows you the differences between two versions of the page.

--- ssl [2011/04/20 00:17] – k2patel
+++ ssl [2020/08/10 02:35] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
+====== SSL / Openssl great way to secure it ======
 ==== SSL Issue and Resolution ====
 **Generate 2048 Bit CSR for godaddy.**
 <code bash>
-openssl req -nodes -newkey rsa:2048 -keyout www.xyz.com.key -out www.xyz.com.csr
+openssl req -nodes -newkey rsa:4096 -sha512 -keyout www.xyz.com.key -out www.xyz.com.csr
 </code>
@@ Line 122: / Line 124: @@
 [[ https://certs.godaddy.com/anonymous/repository.seam | Server Certificates ]]
+== Verisign ==
+[[ https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&actp=CROSSLINK&id=AR1409&TID=retailssl | CA Bundle ]]
 ==== Self Signed SSL ====
 == Generating Private Key ==
 <code bash>
-openssl genrsa -des3 -out www.k2patel.com.key 2048
+openssl genrsa -des3 -out www.k2patel.com.key 4096
 </code>
@@ Line 146: / Line 150: @@
 <code bash>
-openssl x509 -req -days 365 -in www.k2patel.com.csr -signkey www.k2patel.com.csr -out www.k2patel.com.crt
+openssl x509 -req -days 365 -in www.k2patel.com.csr -signkey www.k2patel.com.key -out www.k2patel.com.crt
 </code>
+==== Wilcard Certificate ====
+Wildcard Certificate is nothing diff. in mechanism except how much you pay.\\
+Please read following information before you dive in.
+  * While creating wildcard certificate you need to use "*" as Common Name:
+     * e.g. *.k2patel.in
+  * You can place wildcard certificate on any number of server simply you always need KEY / CRT combination moved / copied.
+    * so you can have multiple server with multiple sub-domain without issue.
+  * You do not need any special way to install / use it simply use as described above.