How-to Make easy a SSL Certificate

[Steffen]

I updated the files to the latest openssl version.

What it does..........


This does 5 things!

1. makes a *.csr file, so that you can send it to a "CA" to get a SSL certificate!

2. Makes a 2 year SSL certificate, that you can use on your server, if you don't want to pay for one!

3. Makes a "client.crt" file that you can post on your site to allow users or members to download and install your SSL certificate!

4. Makes folders, so you know what files go in what folder on your server and what files to safe, and send if you are applying for a SSL certificate from a "CA"!

5. After it is done, it cleans up all the files you don't need........

Download ssl.zip

[holziusa]

f.y.i.
for iis ssl check this
http://www.visualwin.com/SelfSSL/

[Brian]

Howdy,

After running the BAT and following the diretions layed out, I am attempting without success to enable SSL for a remote server which is currently running Sambar version 6.3 with pro license in place.

The indication in the config.ini file is that SSL is enabled, but on the admin entry page (summary page if you will) SSL is not enabled.

I checked the server.log, no entries what-so-ever that pretain to SSL.

It may be noteworthy that the HTTP server does not run on port 80, but I don't see why that would make any difference. Does anyone here have any thoughts why the config shows SSL enabled ...


Enable SSL = true
SSL Verify Client = none
SSL Verify Depth = 1
SSL Session Timeout = 300
SSL Protocols = ALL -SSLv2
SSL Ciphers = {normal stuff is here, I removed it for this post}


... but SSL is not functioning nor generating any errors. Your assistance is appreicated.

- - - - - - - - - - - - - - - - - - - -

Update:

I don't know if I missed a step but I observed in the config.ini file that Act As HTTPS Server = true
... was not enabled. That solved it!

--
Brian

[Johannes]

Hi Steffen,

as I like to use SSL a question to the way you described:

How do I create in the steps described a certificate for more then
one domain ?

Johannes

[Steffen]

See http://forum.sambarserver.info/viewtopic.php?t=7

Steffen

[Johannes]

Yes Steffen, saw that post but I am not able to open the file config/openssl.cnf
With which application is the file to open ?

In the mean time I played a bit with the SSL GUI inside of Sambar and added there more than one domain in the following way: *.domain1.com,*.domain2.com

It's taking this as input as well just fine. So I guess no need to open the mentioned file ?

I have only one problem left: Validating the client certificate with the browser when setting in Sambar services/SSL Validate Client Cert to require & the both boxes below to yes, even when the client certificate is imported into the browser.
How are you handling this, assuming you are using self signed certs?
What steps are involved ? Maybe I am missing one.

Johannes

[gilbertv]

You may open the openssl.cnf with either Notepad or Word. In notepad just change the file type to All Files and you should see all files in the folder.

[waldbauer.com]

Hello Guys !

Because i run into problems generating a new csr may someone can tell me how to. I have still latest sambar but i don't know which openssl is the newest and what and where to copy. I can see that Johannes from www.yorktondigital.ca is still using sambar and his site works also with safari under windows (mine doesn't).

It would be great if someone can provide me the files needed where to copy and what to do exactly to get my sambar ssl working again.

[ingebolk]

Great ! thanx a lot