Current time: 04-20-2014, 04:33 PM Hello There, Guest! (LoginRegister)

Post Reply 
instantSSL Installation
07-21-2003, 03:37 PM
Post: #1
instantSSL Installation
I've designed a few sites before, but I'm in the process of opening my first eCommerce site. I'm at the point where getting an SSL is the next task. I went to http://www.instantssl.com under some of the advice I've seen in these forums. I noticed the free 30-day trial certificate and decided to give it a try. After they approved me for the trial certificate, they sent me an email with the actual certificates and stuff with some links to the installation instructions. Well, I read in DH's KB how to install the main certificate and did so through the admin panel...everything went fine. Then I see in the instructions that there are other "intermediate" certificates to install. This is where I get hung up BIG TIME. I've copied the applicable part of the instructions below. You can also see the full instructions here.

Quote:Step two: Install the Intermediate Certificates

You will need to install the chain certificates (intermediates) in order for browsers to trust your certificate. As well as your SSL certificate (yourdomainname.crt) two other certificates, named GTECyberTrustRootCA.crt and ComodoClass3SecurityServicesCA.crt, are also attached to the email from Comodo. Apache users will not require these certificates. Instead you can install the intermediate certificates using a 'bundle' method.

In the Virtual Host settings for your site, in the httpd.conf file, you will need to complete the following:

1. Copy this ca-bundle file to the same directory as httpd.conf (this contains all of the CA certificates in the chain). If you have purchased a 3 year certificate you should copy this ca-bundle file

2. Add the following line to SSL section of the httpd.conf (assuming /etc/httpd/conf is the directory to where you have copied the ca.txt file). if the line already exists amend it to read the following:

SSLCACertificateFile /etc/httpd/conf/ca-bundle/ca_new.txt

If you are using a different location and certificate file names you will need to change the path and filename to reflect your server.

The SSL section of the updated httpd config file should now read similar to this example (depending on your naming and directories used):

SSLCertificateFile /etc/ssl/crt/yourdomainname.crt

SSLCertificateKeyFile /etc/ssl/crt/private.key

SSLCACertificateFile /etc/httpd/conf/ca-bundle/ca_new.txt

Save your httpd.conf file and restart Apache.
I am having a hard time understanding exactly what to do. I have searched these forums and googled for about the past hour, and it turns out, I am the dumbest person to have ever tried to install a SSL because no one else has ever asked this question before, lol. Seriously, if anyone can throw me a bone here, or if you can just point me towards a good, concise resource, I'd really appreciate it.

Thanks in advance
Visit this user's website Find all posts by this user
Quote this message in a reply
07-21-2003, 06:42 PM
Post: #2
instantSSL Installation
Just mail support the certs, or the link directly to the instantssl.com page with the info, and they'll make the changes. I've installed their certs before and they made the necessary adjustments pretty quickly.
Visit this user's website Find all posts by this user
Quote this message in a reply
Post Reply 


Forum Jump: