[dokuwiki-teams] Re: [infrastructure] SSL certs
- From: Christopher Smith <chris@xxxxxxxxxxxxx>
- To: dokuwiki-teams@xxxxxxxxxxxxx
- Date: Mon, 16 Jul 2012 23:25:52 +0100
On 16 Jul 2012, at 22:30, Andreas Gohr wrote:
> Hey,
>
> I gave up with StartSSL. Their webinterface is a huge PITA. I then had
> a look at GoDaddy and was able to buy the right thing (I hope) and
> after reading a bit through their help section I might now even
> understand how to use my account to create the certificate. All I need
> now is a CSR.
>
> Can one of you guys create it?
>
> Andi
>
> --
> splitbrain.org
>
Sorry to hear that about their web interface. Once you've loaded your private
cert. its fine and never any passwords to remember.
To create a CSR for GoDaddy and lightppd I followed the instructions at
http://support.godaddy.com/help/article/6864/generating-a-certificate-signing-request--lighttpd
which will make the key only 2048 bits. I also used:
Country: DE
State: Berlin
City: Berlin
Company: Dokuwiki
Common name: dokuwiki.org
no password
Godaddy SSL interface seems to be the place to add the additional SANs. I did
make a self-signed certificate with SANs once - I seem to recall it was a PITA.
You can see the key and the csr in /etc/ssl/dokuwiki.
Or re-run the command GoDaddy give to change key length or any of the
associated fields.
- Chris
PS. These are the instructions I usually follow,
http://httpd.apache.org/docs/2.2/ssl/ssl_faq.html#realcert
Other related posts:
