How to obtain SSL Sites

[Joe]

We've finally secured an EASY, FAST and FREE way to have you setup your OWN SSL (Secure Socket Layer) server!! Yes, thats right. Using a company called FREESSL, you can now have you own SSL certificate - for shopping carts, credit card processing and data collection services.
Yes, we said FREE! (check it out: https://hostpc.com

SSL 3.0, RC4 with 128 bit encryption (High); RSA with 1024 bit exchange )


Secure Sockets Layer (SSL) is primarily used for accepting forms securely on your website. It is the recommended way of accepting confidential information securely such as important contact information, etc.

When using SSL, all information sent between the person looking at your web site and the web server itself is encrypted. This is also useful for shopping cart / e-commerce applications, password protected web sites and any situation which requires a high level of security.


Here's how:

1. You'll need to request a Static IP address from HostPC (don't worry - we've got all you need). The fee for each static IP is $20 and can be ordered here: https://hostpc.com/extras.html

2. Once you've got your static IP address issued, go here: https://products.freessl.com/ssl/freessl.do and follow all the directions carefully. If you run into troouble - STOP - ask for assistance through our helpdesk. You'll need to generate for Apache + MOD SSL

3. After you've obtained and installed your SSL certificate, we need to restart the apache server - submit a support ticket and we'll restart it - no problems.

You can be up and running with SSL in as little as 30 minutes...

Good luck!

Joe

[Joe]

We've had several requests to "do this for me" ....

SO... here goes.

We'll do the entire process. Obtain the IP address, obtain and install the certificate, for a $30 fee. Updates (yearly) to the certificate are your responsibility - we're mearly charging $10 to install it - IF you want us to.

Sounds fair, eh?

Joe

[Joe]

IF you use this feature, PLEASE remind us in your support ticket that you need to have your unlimited subdomain patch "repaired" so that unlimited subs continue to work properly.

We encountered this yesterday with a domain - and I'd rather not have anyone "mad" at us :)

Thanks

Joe

[Anonymous]

Joe, I've followed the directions, logged in to the apache server and generated a CSR. I've cut it exactly as it is but when I paste it into the https://products.freessl.com/ssl/enrollment...nt/OrderInfo.do (https://products.freessl.com/ssl/enrollment/OrderInfo.do) page and submit for an Apache+MODSSL server type it won't accept the CSR and keeps giving me a "please enter a valid CSR message". The original paste seemed wider than the form (space at the end of each line) so I tried removing the end of line space and reentered - still get the same message.



Help!
Stuart Forbes


I'm posting here rather than help ticket as I think it might help elucidate the process for other who may also have problems
P.S. The instructions from freessl say to use Common Name of www.hsworlds.com but the ENSIM form uses hsworlds.com - I changed this to www.hsworlds.com - is that correct?

[Joe]

Email me the CSR and the CERT, I'll install it - or find out what the problem is.

Thanks

Joe

[Anonymous]

Thanks Joe - info e-mailed to you.

[Anonymous]

Joe I'm still getting the "The security certificate was issued by a company you have not chosen to trust...." message.

Is this what I should expect? The certificate gives the issuing authority as hsworlds.com - is this correct or should it refer to the freessl or whatever (I don't know if you've actually managed to get the CSR via FREESSL as I am still not able to).

Stuart Forbes

[Anonymous]

Anybody out there?

[Joe]

I"m workin on it... looks like the cert style was bad, I'll have it done in a little bit hopefully... Sorry its taking so long, had a little "incident" during the upgrade yesterday... and this week alone I've shoveled more snow than in the past 10 yrs.. we got HAMMERED. I know, no excuses, get back to work Joe :)



Joe

[Anonymous]

No prob - glad you're OK!


and the upgrade was a day early - what can I say!
Cheers

Stuart Forbes

[Anonymous]

..................................... are you sure there's somebody out there:)

[Anonymous]

somoene send a search party - Joes' stuck in the snow... :lol:

[Joe]

Effective immediately, I am NOT recommending FreeSSL for any certificates. They work, I've proven that (https://hostpc.com/ordering.php) - but once ONE customer has an issue that can't be resolved, I can't, in good faith, continue to recommend a 3rd party company.

In this instance, I think it is because of mixed content - banners served by an advertising company - that is causing the problems. While his page reports 1024 bit encryption, no lock is viewable in Internet Explorer.

Whatever the reason for this, I won't be endorsing FreeSSL ... I would STRONGLY suggest anyone who wants a certificate for an actual working environment check out http://www.rackshack.net for a Geotrust Certificate ($49)

Thanks

Joe

[Joe]

Stuart took the time to make a great How-To... all together, with graphics, and step by step instructions. We hope this helps others with obtaining and installing the certificates:

http://www.hsworlds.com/help/sitecert.htm