SSL Security Certificate

jdlitson

jdlitson

Verified User
Joined
May 29, 2003
Messages
261
Hi,
can anyone recommend a good place to buy an inexpensive security cert?

Thanks for your time and help -Jason
 
Last edited:
Thanks John,
Do you konw if the Instant SSL ($49) one would work as a shared SSL so my customer's and resellers could also use it?

Thanks again.
 
You would just put it as the server's main certificate:

/etc/httpd/conf/ssl.crt/server.crt
/etc/httpd/conf/ssl.key/server.key

This can be done from any domain use an Admin user. Admin users will only change the server's certificate, so adding the new values there will change it for everyone using the server.. or you can just do it manually :).

Your other websites would still get a SSL popup in their browsers, because the hostname wouldn't match, but it would still show your information in the cert.

John
 
DirectAdmin Support said:
Anyone else have other suggestions/deals?

John
Click to expand...

RackShack sells GeoTrust QuickSSL certs for $39. I've only used them once before but its only $39 and they were great when I lost my RSA private key *oops* and quickly refunded my old certificate and issued a new one (within 7 days).
 
ProWebUK said:
]rackshack now offer them at $25... try and beat that :)
Click to expand...
Tried. Can't :( . I always thought I was the lowest-priced cert provider, but now I know I'm not.

I'm curious, so this is a request to anyone with a RackShack cert: please let me know your URL; I want to see if RackShack's name is hidden in your cert.

Don't worry, I won't try to hack your system download your cert or anything similar; I'll just look at your cert details in my browser and examine all the fields.

You can do it yourself if you know how to check all the cert fields.

Jeff
 
just checked one (cant provide URL) and there is no rackshack there at all

Chris
 
Thanks.

Since they charge less than I get them for, I think I'm going to go ahead and buy one the next time I need a cert for one of my own domains; I'll try it out for browser ubiquity and for ease of installation.

Maybe I should make arrangements with GeoTrust similar to those I now have with Comodo (to resell their certs for less than they sell them for).

Jeff
 
jlasman said:
I'm curious, so this is a request to anyone with a RackShack cert: please let me know your URL; I want to see if RackShack's name is hidden in your cert.
Click to expand...

https://provos.modernhosting.net

I installed a geotrust cert on that server that was bought from RS..


jlasman said:
Thanks.

Since they charge less than I get them for, I think I'm going to go ahead and buy one the next time I need a cert for one of my own domains; I'll try it out for browser ubiquity and for ease of installation.

Maybe I should make arrangements with GeoTrust similar to those I now have with Comodo (to resell their certs for less than they sell them for).

Jeff
Click to expand...


Really your not gonna get a great deal from GeoTrust.. Infact I think RS sells the certs at a major loss just to bring traffic in.. Which seems to work :D
 
Thanks, Prohacker.

There's no RackShack info anywhere on the cert; it's an excellent buy at the price :) .

From looking at their site it doesn't look as if you have to host with them to get the price, so I'm not sure why they'd do a loss-leader.

In any event, I haven't decided yet whether to contact GeoTrust; they've been in touch with me before; they wanted me to sell their product when I first signed up with Comodo.

Again, thanks!

Jeff
 
you dont need to be a RS customer to purchase the certs :) and even with a partnership i doubt you will match the price that RS supply them at.... im sure RS have a huge contract with geotrust and are providing geotrust with lots of money to get them at that price...
 
Wow and I thought 50 buck was a great deal!
It's unbelievble the prices Versign charges!
I'm so happy I asked this question here.

Thanks everyone -Jason
 
ProWebUK said:
im sure RS have a huge contract with geotrust and are providing geotrust with lots of money to get them at that price...
Click to expand...
Yes, but are you sure that we're not buying a lot of certs from Comodo :) ?

We are.

Jeff
 
jdlitson said:
Wow and I thought 50 buck was a great deal!
Click to expand...
It is, Jason. It's just that the RackShack deal is a better one :) .

From the price you mentioned, my guess is you're buying InstantSSL certs from Comodo. We've been reselling their certs for some time now and we're quite happy with them. If you set yourself up as a reseller you'll get a better price from them, but certainly not $25.

Jeff
 
jlasman said:

From looking at their site it doesn't look as if you have to host with them to get the price, so I'm not sure why they'd do a loss-leader.
Click to expand...

You don't have to host with them to get the cert at that cost... They would normally sell them at a loss to just bring traffic into their site.. Hey.. When your there buying a cheap cert you would see that they also offer very cheap prices on servers too :D

RS is known for under cutting anyone and everyone in the market.. And thats what they are good at.. And everything they provide that I've ever bought from them is excellent quality... When Robert says no one can beat them.. He's right :D
 
Yes, it is a great deal Jeff.
The only thing that has stoped me from buying the $50 cert is that I still need to updat my OpenSSL.
Looks like that's going to be a pain (for a beginner).

I am wondering now if the OpenSSL is good software?
Perhaps it would save time to use another SSL software so I don't have to keep fixing the OpenSSL holes.

Is there anything else that would be better security wise and still low cost? Does everyone here use OpenSSL?

I am assuming that OpenSSL would still need to be installed even though we buy a signed Cert?

-Jason :rolleyes:
 
The Prohacker said:
everything they provide that I've ever bought from them is excellent quality... When Robert says no one can beat them.. He's right :D
Click to expand...

couldn't agree more :D
 
jdlitson said:
The only thing that has stoped me from buying the $50 cert is that I still need to updat my OpenSSL.
Looks like that's going to be a pain (for a beginner).
Click to expand...
I'm presuming you're using a Red Hat system, based on RPMs. I'd be quite surprised if you don't have it installed. If you don't, then you should just get the most recent RPMs for your system from Red Hat and install them with:
Code: 
# rpm -Uvh <rpm-file-name.rpm>
The RPM won't install if there are any dependencies, so you can then make a decision to install the dependencies.

Personally I use apt-rpm to keep a lot of systems up-to-date. We haven't any live DirectAdmin systems yet, but I'm going to try updating a test DirectAdmin system in the next few days and I'll let you know how it went.

apt-rpm should not hurt anything, it will only update packages that have the same name and main version number. But don't install it without the go-ahead from Mark, as I can't guarantee anything.

I am wondering now if the OpenSSL is good software?
Click to expand...
I don't even know anyone who isn't using it for SSL on Red Hat Linux. Imho it's at least as secure as any other SSL implementation.

A few years ago, when the SSL code was still proprietary, Red Hat licensed the code and sold a secure server that just plugged into Red Hat Linux; it worked fine and plugged in easily. But it was much more complex than just installing SSL as part of Red Hat install as we do today.
Perhaps it would save time to use another SSL software so I don't have to keep fixing the OpenSSL holes.

Is there anything else that would be better security wise and still low cost?
Click to expand...
Most of us are probably using mod_ssl, which uses OpenSSL <http://www.modssl.org/>.

There's an alternative apache product, Apache-ssl <http://www.apache-ssl.org/> but I don't know anyone using it, and it does notget installed as part of the Red Hat install.

I'd recommend, especially for aanyone using a server administration package (such as DirectAdmin, Plesk, CPanel, etc.), and certainly for newbies, that you stick with officially supported packages; otherwise you're completely on your own when it comes to support.
Does everyone here use OpenSSL?
Click to expand...
I can't speak for others, but I'd be quite surprised if anyone was using any other implementation with DirectAdmin.
I am assuming that OpenSSL would still need to be installed even though we buy a signed Cert?
Click to expand...
Yes. The certificate merely identifies your website and enables the encrypted data transfer.

Jeff
 
You must log in or register to reply here.
Back
Top