SSL, Here it comes again... Help from anyone who uses SSL...

dracomaster · Joined: 24 Jun 2004 Posts: 81 Location: Toledo, Oregon

I was wondering if ANYONE has had any success with using a legit SSL certificate on Firstspot. If so, please let me know what company you used. I usually use Godaddy, for my SSL needs, but they no longer accept private IP addresses in the CSR.

I know Patronsoft has little support for this subject, so I'm reaching out everyone else who may have used it. Are there any success stories, please let me know.

Thanks in advance...

Jairus Knudsen

gsgriffin · Joined: 25 Jun 2007 Posts: 54

A good question might be expanded by telling us what you are trying to do. There are often more than one way to solve a problem and SSL may be only one. Are you sure it has to be SSL with a cert? What is it your want to accomplish with that?
_________________
Greg

dracomaster · Joined: 24 Jun 2004 Posts: 81 Location: Toledo, Oregon

I would like to have logins encrypted, but I don't want any "SSL Invalid" nag screens scaring away customers.

alan · **Forum facilitator** Joined: 26 Sep 2003 Posts: 4435

So if we change login page URL to domain name instead of IP (e.g. https://firstspot.org/... ), it should be easier so you to obtain a 3rd party CA cert?

BTW, I think there are other cert vendors that accept IP. Just have to dig it out.
_________________
~ Patronsoft Limited ~

dracomaster · Joined: 24 Jun 2004 Posts: 81 Location: Toledo, Oregon

Yes I think that would do it, but I would like to be able to set the domain name to one of the names I've already registered. Then I could just set the DNS to point to it.

alan · **Forum facilitator** Joined: 26 Sep 2003 Posts: 4435

One question, from your experience can you obtain cert for domain name that you did not own?
_________________
~ Patronsoft Limited ~

dracomaster · Joined: 24 Jun 2004 Posts: 81 Location: Toledo, Oregon

Well the impression I got was that as long as the domain name is not "suspicious" they'll create it. (I tried to create a SSL for a domain with the word "fidelity" in it which threw up a bunch of red flags.) And come to think of it, I had an SSL certificate created by TurboSSL for a domain hosted by a completely different company, there was no ownership confirmation. I'm not sure if it is like this for all SSL Companies, but it seems to be for GoDaddy and TurboSSL.

If it comes down to supporting one company or the other, I would HIGHLY reccomend pushing for GoDaddy, at 29.95 a Year, it's the most economical option.

dracomaster · Joined: 24 Jun 2004 Posts: 81 Location: Toledo, Oregon

so are there going to be anything done to implement this or is just a nice "What if..." thought?