SSLCertificate

From Emersion
Revision as of 15:52, 22 September 2014 by Scarpenter (talk)
Jump to: navigation, search

This article is designed for clients with limited access to resources who are educated in web technologies, specifically Open SSL.

There are a number of ways and methods to get a signed SSL certificate. Usually, your IT team will have a preferred method and supplier to obtain you a valid SSL certificate that’s appropriate for you. This method below is a common DIY method, but by no means is exclusive.

First, install Open SSL on on your computer, or have a computer/server with Open SSL installed on it.

You do NOT need Emersion to generate the CSR. And it does NOT need to be generated from our web servers. You can generate a certificate from any machine

Step One: Generate the CSR

Go to http: https://www.digicert.com/easy-csr/openssl.htm

Fill in the details, click Generate

Example:

CSR request.png

You will be shown a command to copy/paste with the parameters you entered included.

On the machine with Open SSL, open a terminal session and run this command.

OpenSSL creates both your private key and your certificate signing request, and saves them to two files:

  • signup_mycompany_com_au.key
  • signup_mycompany_com_au.csr

Keep both handy.

Step Two: Contact a Certificate Signing Authority

Emersion remains independent and will not advise you on which Certificate Signing Authority to use. However they assist you to choose the certificate that best suits you, and they will sign your certificate.

Step: Three: Sending the Certificate and the Private Key to Emersion

When the certificate has been delivered to you, forward it to Emersion with the Private Key. We need BOTH the SSL Cert and Private Key in order to complete the installation of the SSL Certificate on the server.

It will look like this when opened:

A signed SSL Certificate

SSL certificate.png


Private Key – Viewed in a text editor

SSL private key.png

Please be aware that Emersion is not a Certificate Signing Authority. Please do not ask us to sign a certificate for you.