Comodo SSL certificate

 
Post new topic   Reply to topic    Aprelium Forum Index -> SSL/Certificates
View previous topic :: View next topic  
Author Message
Bibo
-


Joined: 08 Nov 2003
Posts: 19
Location: Melbourne, Australia

PostPosted: Fri Apr 17, 2015 9:37 am    Post subject: Comodo SSL certificate Reply with quote

Comodo sent me 4 files:

1- Root CA Certificate - AddTrustExternalCARoot.crt
2- Intermediate CA Certificate - COMODORSAAddTrustCA.crt
3- Intermediate CA Certificate - COMODORSADomainValidationSecureServerCA.crt
4- Your PositiveSSL Certificate - mysite_com_au.crt

and I don't know which goes where in the Abyss "Certificates - Add" page

1- Main Certificate
2- Intermediate Certificate
3- CA Root Certificate

I think Comodo has 30% of the SSL market so I am a bit surprised the terminology seems (to me) to be so different
Back to top View user's profile Send private message
DanielC
-


Joined: 19 Jan 2008
Posts: 5
Location: France

PostPosted: Sat Apr 18, 2015 5:28 pm    Post subject: Reply with quote

Simply add both intermediate cerificates in the same place, paste one after the other.

Main Certificate > mysite_com_au.crt
Intermediate Certificate > COMODORSAAddTrustCA.crt + COMODORSADomainValidationSecureServerCA.crt
CA Root Certificate > AddTrustExternalCARoot.crt

I'm using a Comodo EssentialSSL with a 4096 bit private key on my server.

You could also try the follow settings :

General > Advanced Parameters > SSL/TLS Parameters

SSL/TLS Profile : Custom
Ciphers : Strong
SSL 3.0 : No
TLS 1.0 : Yes
TLS 1.1 : Yes
TLS 1.2 : Yes

General > Advanced Parameters > Custom HTTP Headers

Virtual Path : /
HTTP Header Name : Strict-Transport-Security
HTTP Header Value : max-age=31536000; includeSubDomains

To understand the Strict-Transport-Security header :

http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

You can test your SSL here :

https://www.ssllabs.com/ssltest/

Using the settings above I get an A+ rating :



Also, don't forget that you can only use one SSL certificat per IP address.
_________________
~ Dan
www.danielclayton.com
Back to top View user's profile Send private message Send e-mail Visit poster's website MSN Messenger
Bibo
-


Joined: 08 Nov 2003
Posts: 19
Location: Melbourne, Australia

PostPosted: Mon Apr 20, 2015 3:56 am    Post subject: Reply with quote

Thank you Dan. Much appreciated. :-)
Back to top View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Aprelium Forum Index -> SSL/Certificates All times are GMT + 1 Hour
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB phpBB Group