ssl
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
ssl [2011/04/20 00:17] k2patel |
ssl [2020/08/10 02:35] (current) |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| + | ====== SSL / Openssl great way to secure it ====== | ||
| + | |||
| ==== SSL Issue and Resolution ==== | ==== SSL Issue and Resolution ==== | ||
| **Generate 2048 Bit CSR for godaddy.** | **Generate 2048 Bit CSR for godaddy.** | ||
| <code bash> | <code bash> | ||
| - | openssl req -nodes -newkey rsa:2048 -keyout www.xyz.com.key -out www.xyz.com.csr | + | openssl req -nodes -newkey rsa:4096 -sha512 -keyout www.xyz.com.key -out www.xyz.com.csr |
| </code> | </code> | ||
| Line 120: | Line 122: | ||
| == GoDaddy == | == GoDaddy == | ||
| - | [[ https://certs.godaddy.com/anonymous/repository.seam | Server Certificate ]] | + | [[ https://certs.godaddy.com/anonymous/repository.seam | Server Certificates ]] |
| + | == Verisign == | ||
| + | [[ https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&actp=CROSSLINK&id=AR1409&TID=retailssl | CA Bundle ]] | ||
| ==== Self Signed SSL ==== | ==== Self Signed SSL ==== | ||
| == Generating Private Key == | == Generating Private Key == | ||
| <code bash> | <code bash> | ||
| - | openssl genrsa -des3 -out www.k2patel.com.key 2048 | + | openssl genrsa -des3 -out www.k2patel.com.key 4096 |
| </code> | </code> | ||
| Line 146: | Line 150: | ||
| <code bash> | <code bash> | ||
| - | openssl x509 -req -days 365 -in www.k2patel.com.csr -signkey www.k2patel.com.csr -out www.k2patel.com.crt | + | openssl x509 -req -days 365 -in www.k2patel.com.csr -signkey www.k2patel.com.key -out www.k2patel.com.crt |
| </code> | </code> | ||
| + | ==== Wilcard Certificate ==== | ||
| + | Wildcard Certificate is nothing diff. in mechanism except how much you pay.\\ | ||
| + | Please read following information before you dive in. | ||
| - | + | * While creating wildcard certificate you need to use "*" as Common Name: | |
| + | * e.g. *.k2patel.in | ||
| + | * You can place wildcard certificate on any number of server simply you always need KEY / CRT combination moved / copied. | ||
| + | * so you can have multiple server with multiple sub-domain without issue. | ||
| + | * You do not need any special way to install / use it simply use as described above. | ||
ssl.1303258646.txt.gz · Last modified: 2020/08/10 02:29 (external edit)
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
