Generating and Installing Wildcard and Multi-Domain SSL Certificates Generate a CSR (Cert Signing Request) For a Wildcard Domain Normally, to generate a certificate for a wildcard domain such as *.example.com, all you have to do (when generating the CSR) is specify in the “Common Name” field: *.example.com The problem is that that: This will only […]

So after you installed OpenSSL you can start it from it’s Bin folder. I’d like to put OpenSSL\Bin in my path so I can start it from any folder. Fire up a command prompt and cd to the folder that contains your .pfx file. First type the first command to extract the private key: openssl […]

OpenSSL command reference General OpenSSL commands commands to generate CSRs, Certificates, Private Keys and other tasks. Generate a new private key and matching certificate signing request (Unix) openssl req -out CSR.csr -pubkey -new -keyout privateKey.key Generate a new private key and matching certificate signing request (Windows) openssl req -out CSR.csr -pubkey -new -keyout privateKey.key -config […]

SSL0208E IKEYMAN VeriSign error  SSL0208E IKEYMAN VeriSign error   SSL0208E IKEYMAN VeriSign error | v.yeung Upon installing the certificates received back from VeriSign, the following error may be shown in the error_log when trying to access the site via https: [Tue Jun 29 10:34:37 2010] [error] [client 10.64.136.75] [e6968ff8] [10436] SSL0208E: SSL Handshake Failed, Certificate validation […]

How to install an SSL certificate on IHS (IBM HTTP Server) How to install an SSL certificate on IHS (IBM HTTP Server) I’m going to explain how to install an SSL certificate on IHS (IBM HTTP Server). I have received this request yesterday and today I have struggled with this configuration. So, now if you […]

From time to time you have to update your SSL keys and certificates. In some cases you may have a mixed infrastructure e.g. “normal” http servers and tomcat or other java based servers. In the latter case you’ll have to import your shiny new certificate and key into your java keystore. There are several methods […]

In Windows cases you need to merge these files into a PFX file. Now before I tell you the secret I wish to explain what the difference is between the different files so you know how the certificate works. •A .csr file is a certificate signing request which initiates your certificate request with a certificate […]

Apache v1.X Download the appropriate intermediate certificate(s). Save it in a text editor such as Notepad as “intermediate.pem” Copy your SSL certificate from the order fulfillment email or log into your GlobalSign Certificate Center account and download it. Paste it into a text editor. Save as “mydomain.pem.” Copy “mydomain.crt” and “intermediate.pem” to the directory in […]

What is SSL? SSL is a popular encryption technology to protect user privacy information transmitted via the Internet. When a user visits a secure Web site, such as Gmail.com, you will see a “lock” in the next URL address, show that you communicate information on the site is encrypted. ??This “lock” indicates that a third party can […]

certificate is signed using a weak signature algorithm! Turns out that this results in SSL certificates that use the weaker MD5 signature hash algorithm which is the cause of the complaint. This is easily fixed by adding ‘-sha1’ to the openssl command line when generating the certificate. Like so: $ openssl req -new -x509 -sha1 […]