LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 12-24-2004, 10:40 PM   #1
mrpc_cambodia
Member
 
Registered: Jun 2004
Posts: 131

Rep: Reputation: 15
Free SSL Certificate


I already have a webserver (IIS) and want to host a web site in secure mode, https.

As i know to do that i have to configure my webserver to support https and buy a certificate from Certificate of Authority (I don't know whether this is the correct term or not).

I don't want to buy this. So Is there any site, vendor, or private organization who provide free Certificate?

The reason for this is: i want to increase the security of my site but not to the point that i need to spend money for that.


Thanks,
 
Old 12-25-2004, 11:03 AM   #2
brettcave
LQ Newbie
 
Registered: Aug 2004
Location: Johannesburg, South Africa
Distribution: Mandrake, RH, Fedora
Posts: 22

Rep: Reputation: 15
You can generate your own certificate on a Linux system by issuing the following command:

openssl req -config /etc/openssl.conf -new -x509 -keyout \
private/cakey.pem -out cacert.pem -days 3650

This will create a certificate with you as the CA, and obviously, noone out there will have you as a trusted CA. You can then have instructions on your site on how to add your CA as a trusted source. (until then, all data will be encrypted, but a warning will pop up in your browser, stating that the autority is not trusted).
 
Old 12-26-2004, 07:30 PM   #3
mrpc_cambodia
Member
 
Registered: Jun 2004
Posts: 131

Original Poster
Rep: Reputation: 15
So i just need to configure my web server to support https and then whenever user request web page from my web server using htttps port, all communication will be encrypted.

is that right?
 
Old 12-26-2004, 11:41 PM   #4
brettcave
LQ Newbie
 
Registered: Aug 2004
Location: Johannesburg, South Africa
Distribution: Mandrake, RH, Fedora
Posts: 22

Rep: Reputation: 15
Yes. Configuring your webserver to use https will require a certificate though.
 
Old 12-27-2004, 07:25 PM   #5
mrpc_cambodia
Member
 
Registered: Jun 2004
Posts: 131

Original Poster
Rep: Reputation: 15
Thanks,.
 
Old 01-13-2005, 06:02 PM   #6
duliano
Member
 
Registered: Oct 2004
Location: Clayton, NY
Distribution: SuSE Prof 9.1, 9.2, 9.3Pro X86_64 SLES 8 & 9
Posts: 82

Rep: Reputation: 15
Just one thing to add here -- You yourself are not a trusted CA (Certificate Authority) like Verisign, etc. So even though you will be issuing a certificate, only you can be sure that it is from a trusted source. This may not matter if all the people connecting to your website are say from an intranet but if you are doing any kind of ecommerce, etc you may have to go another route

I believe it you do a search on Free CA's or open source CA you may be ablel to find someone

Hope this helps
 
Old 01-13-2005, 10:20 PM   #7
brettcave
LQ Newbie
 
Registered: Aug 2004
Location: Johannesburg, South Africa
Distribution: Mandrake, RH, Fedora
Posts: 22

Rep: Reputation: 15
www.freessl.com used to offer free certificates, but i see they now only offer 30 day trials.
 
Old 03-04-2005, 04:56 PM   #8
TomaCzar
Member
 
Registered: Dec 2003
Location: Roc City (Rochester-NY)
Distribution: Slacker 4 Life
Posts: 125

Rep: Reputation: 15
I beleive the following does free certificates:

http://www.cacert.org/
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
SSL Certificate The_JinJ Linux - General 1 03-21-2005 11:46 PM
ssl-certificate twantrd Linux - General 1 03-31-2004 08:47 AM
Not able to install SSL certificate shekar_300 Linux - Security 1 02-12-2004 01:36 PM
SSL Certificate terminology dvong3 Linux - General 1 12-19-2003 08:50 AM
SSL certificate without..... Drogo Linux - Software 1 06-13-2003 02:13 AM


All times are GMT -5. The time now is 11:42 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration