1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Help needed with SSL!

Discussion in 'BlackHat Lounge' started by carsonrathi, Feb 26, 2009.

  1. carsonrathi

    carsonrathi Senior Member

    Joined:
    Mar 12, 2008
    Messages:
    1,106
    Likes Received:
    759
    Hey Guys,

    recently i bought SSL certificate from GoDaddy.com but after purcahse i come to know that you also need CSR (Certificate Signing Request) to obtain SSL.

    I am using webhostingpad for hosting, can anyone tell me how to create CSR using webhostingpad hosting?

    Thanks.
     
  2. asyk

    asyk BANNED BANNED

    Joined:
    Oct 14, 2008
    Messages:
    127
    Likes Received:
    57
    if you allready got the SSL, that means CSR has allready been generated otherwise you couldn't have gotten the SSL. CSR stands for Certificate Signing Request
     
  3. carsonrathi

    carsonrathi Senior Member

    Joined:
    Mar 12, 2008
    Messages:
    1,106
    Likes Received:
    759
    Nope, its not like that.

    I bought SSl from godaddy which any one can buy instantly but it is asking for CSR in order to issue certificate... i dont know how to generate CSR using webhostingpad hosting..
     
  4. LoneRogue

    LoneRogue Newbie

    Joined:
    Feb 22, 2009
    Messages:
    12
    Likes Received:
    5
    If you purchased an SSL certificate, then it's one that GoDaddy probably offers as a 'shared' certificate. Having worked for one of the more popular 'certificate authorities' for six years, what "asyk" said is true...

    In order for a web server to enable SSL (Secure Socket Layer), the web server MUST first generate the CSR (Certificate Signing Request).

    The CSR, which looks like this

    ----BEGIN CERTIFICATE REQUEST-----
    followed
    by
    lines
    of
    random
    key
    strokes
    -----END CERTIFICATE REQUEST-----

    Must then be passed to a "Certificate Authority"...who then digitally signs the certificate with their own private Key.
    (Every CA has their 'public key' already distributed into the browsers)

    The returned certificate, which looks like this

    -----BEGIN CERTIFICATE-----
    followed
    by
    lines
    of
    random
    key
    strokes
    -----END CERTIFICATE-----

    Is then matched with its corresponding private key on the server. The SSL certificate then allows the server to do SSL.

    Sounds like you should have obtained the CSR first from "webhostingpad", then passed that over to GoDaddy, so they could digitally sign it with their private key.

    Find out what GoDaddy's "replacement process" is and see if you can get a new one....shouldn't take that long and might even be free depending on what GoDaddy's policy is.
     
    • Thanks Thanks x 1
  5. blackmark

    blackmark Registered Member

    Joined:
    Mar 7, 2008
    Messages:
    55
    Likes Received:
    8
    Most likely your using apache? Try using openssl, google the command for creating csr...
     
  6. carsonrathi

    carsonrathi Senior Member

    Joined:
    Mar 12, 2008
    Messages:
    1,106
    Likes Received:
    759
    Hey Gen,

    Thanks for the help bro.

    Gen, i read the webpage (via link provided by you) however i dont understand :

    1) How to install OpenSSL, i have cPanel provided by web hosting pad.

    2) Where to execute those commands like "sudo apt-get install openssl"

    Thanks.
     
  7. blackmark

    blackmark Registered Member

    Joined:
    Mar 7, 2008
    Messages:
    55
    Likes Received:
    8
    You need to have ssh root access in order to run install openssl. Also you need to have a dedicated IP.

    I think in CPanel there's a SSL manager, where you can generate CSR.
     
  8. carsonrathi

    carsonrathi Senior Member

    Joined:
    Mar 12, 2008
    Messages:
    1,106
    Likes Received:
    759
    Thnks... but can anyone explain in simple english?
     
  9. BlackSeo

    BlackSeo Jr. VIP Jr. VIP Premium Member

    Joined:
    Feb 18, 2007
    Messages:
    232
    Likes Received:
    305
    Occupation:
    Marketer
    Location:
    In BlackHat World
    Go to Security-->>SSL-TLS manager in your Cpanel.. and:

    cPanel 11 Documentation
    Security: SSL/TLS Manager

    Overview

    The SSL/TLS Manager will allow you to generate ssl certificates, signing requests, and keys. These are all parts of using SSL to secure your website. SSL allows you to secure pages on your site so that information such as logins, credit card numbers, etc are sent encrypted instead of plain text. It is important to secure your site's login areas, shopping areas, and other pages where sensitive information could be sent over the web.

    The first step in generating an SSL certificate is to create a Private Key. Start by reading the instructions in the "Private Keys (KEY)" section below.
    Step 1: Private Keys (KEY)

    1. Click on the Generate, view, upload, or delete your private keys link. On SSL-TLS manager
    2. When the page loads, scroll to the bottom and you will see the "Generate a New Key" section. Enter the domain you want to create an SSL Certificate in the "Host" text box. Or you can select the domain from the "Select a Domain" drop down menu.
    3. Click on the Generate button.
    4. Click on the Return to SSL Manager link.
    5. When the page loads, click on the Go Back link. This will take you to the main "SSL/TLS Manager" page.
    6. Continue with "Step 2" below.

    Step 2: Certificate Signing Requests (CSR)

    Before you being, check with your SSL provider as they may require your information in a specific way. Please check with their necessary CSR information for Apache. Then proceed with the steps below.

    1. Click on the Generate, view, or delete SSL certificate signing requests" link.
    2. When the page loads, set the following:
    * Host - Select the domain name from the drop down menu.
    * Country - Enter your two-digit country code.
    * State - Enter your two-digit state abbreviation.
    * City - Enter your city's name.
    * Company - Enter your company's name.
    * Company Division - Enter your company's division.
    * Email - Enter your email address.
    * Pass Phrase - Enter any phrase you want to use for the pass phrase.
    3. Click on the Generate button.
    4. Click on the Go Back link.
    5. Use the CSR you copied in Step 5 above to generate your SSL Certificate with your SSL provider. Your SSL provider will create a CRT file and send it to you. Save the file on your computer so you can use it in a later step.
    6. Continue with "Step 3" below.

    Step 3: Certificates (CRT)

    1. Click on the Generate, view, upload, or delete SSL certificates link.
    2. Paste the CSR you copied in Step 5 of the "Certificate Signing Request (CSR)" section above.
    3. When the page loads, click on the Browse button and locate the CRT file your SSL provider created for you. Or if you have highlighted and copied the contents of your CRT file, paste it in the "Upload a New Certificate" text box.
    4. Click on the Upload button.
    5. Continue with "Step 4" below.

    Step 4: Activate SSL on Your Web Site (HTTPS)

    This step must be done prior to using your SSL Certificate.

    1. Click on the Setup a SSL certificate to work with your site link.
    2. Select the domain you are using to install a SSL Certificate from the "Domain" drop down menu. The system will attempt to "Fetch" the SSL Certificate for you. If you receive an error, please contact your web hosting provider for further support.

    Hope this help you

    BlackSeo
     
    Last edited: Feb 26, 2009
  10. ifwearner

    ifwearner Regular Member

    Joined:
    Jul 24, 2008
    Messages:
    253
    Likes Received:
    51
    Yeah.. read above.. his description is better than mine :D
     
  11. gimme4free

    gimme4free Executive VIP Jr. VIP Premium Member

    Joined:
    Oct 22, 2008
    Messages:
    1,884
    Likes Received:
    1,932
    Basically, just purchase the business package with HostGator and you get all the dedi IP + SSL for free.
     
  12. carsonrathi

    carsonrathi Senior Member

    Joined:
    Mar 12, 2008
    Messages:
    1,106
    Likes Received:
    759
    Hi,

    Webhostingpad does not offer SSl-Manager in control panel!

    my bad..:(

    Thanks for your help.