|
1. How do I install my own certificate ?
2. Is emailing the results of a secure page safe?
3. When should I use the secure server?
4. How do I access the server securely?
1. How do I install my own certificate ? - Top
Setting up a secure server requires that you purchase a secure digital
certificate from either Verisign or Thawte. This is a two-step process.
Step One Contact Support and they will generate a private key and certificate request for you as shown below
The private key, which will be saved until you receive the certificate from Thawte or Verisign will look something like this:
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,B82F170581AC18CA xulUrmeoHwvU3hf7l176FK8sCmAFR3JvwW3ZHcGGLoV3WqPv9NGDaqyZOJp/E 9i8
w58XGW/oMIKpC+rCoh647O0QTC60DRwPoq5S6nqbSra7ev4glkfK6tBD6uGolf FT Te41AFNELNhuseeRP/2DloAiBgCVftSHsJwbbWA5Py9zkuhzFPFMGrYXk1GVci+ G
oyBOnz0zxiHjpD0JR0cnsGP4wQgetal3IoOHdz1xzRy3ZqbJE+Ius3lQua9Hunmx 4cAxRNWvxLhGEvn6+4LuPGqwPoEcsPUmAIofknYB1dJmpkBBV9Xv+30KvwR6 UxDI
67ZGM6bNwkeKU241sB6I+h72VLd3W9n0x35OEDZ/lbHw3J0ADLEM9K909xTO M7zZ E8pj8mByvLxAwRt1JJOnbf74NtXbbarJ2WSqUEcx/bLp/sQmgBLUhdzxSPPjJMeJ
hrBz5U2UpFvfvBzb85QxTrXBJ7lIX2B5ubMn9uKLxCfA+nU0aPC4yrm/qbj+CVz0 Co62ijI+kOFe9KzDRghdj2aRkajRi8BAMaXuwh5gpZbmHlDIhIJ7tjXtz4Q9HKee
rnbwlyIn0td+mPGBACA5J4Sg/+tupjo83cDKmSYB+J/U7ypTlFIhOvr53+7sQPCb R/UYWEfnGdQEDxBtuv2ILz+bIUssovyf7/cua6iDzpA79t5s6Um2cHaVA0SUCFt u
HNhrbo2GVBsdgP/jx7sbh82pHENBlIw0TV8ot1ACtoWFj6Ly3ImX4K7Wq0i+e37 v km6x45lQke8CimKc0EQpbRTVARGCYHCSFeu+QiabZmor6z0eNQ+Tbw==
-----END RSA PRIVATE KEY-----
The certificate request, that needs to be sent to Thawte or Verisign will look something like this:
-----BEGIN CERTIFICATE REQUEST-----
MIIBrTCCARYCAQAwbTELMAkGA1UEBhMCdXMxDTALBgNVBAgTBHRlc3QxDTA LBgNV BAcTBHRlc3QxDTALBgNVBAoTBHRlc3QxDTALBgNVBAsTBHRlc3QxDTALBgNVB AMT
BHRlc3QxEzARBgkqhkiG9w0BCQEWBHRlc3QwgZ8wDQYJKoZIhvcNAQEBBQAD gY0A MIGJAoGBAOErsqxeuO2RFcOdRxnwoo1O6LoQMYGf2DchAUk9oqX8vTBLSTTe PLdQ
32sNH/Zx9eGHKg6LZ7jaSg6JqiZtbPv9VloDT8AEvK3eYr/ok+t6chAqrBGZmdNl Muf77GeX4qyZ9ImT/vUjnClYtiE0Sw+Jen5bDgGw3GqsONIUap1FAgMBAAGgA DAN
BgkqhkiG9w0BAQQFAAOBgQB2WEBLVL4jISoclbICEEVyXsH3Olefrspsw/Co0wL w nKcSiLovXGX32ZNJ+W5FtJLeYdB4Vdt++CQ2ShIkmZT0sF1l5c08AwslpwZR56 LZ
5wahdhr+8D1A7OS68DofAZJiJxmJw2NnJXEVH0EdftAQfafo0WLRQ5CUYOSkp ZAp YQ==
-----END CERTIFICATE REQUEST-----
You will need to send this request to Thawte or Verisign to receive your certificate. When you receive the certificate from Thawte or Verisign, you will be
able to complete step 2.
Back to the top of the page.
Step 2
Once you receive the certificate from Thawte or Verisign support will need to install it.
After the certificate is installed you can call any of the pages on your domain securely like this: https://www.yourdomain.com/somepage.html
2. Is emailing the results of a secure page safe?- Top
Not unless you have it encrypted and are using PGP with your email program.
To provide a reasonable degree of security, secure data should immediately be re-encrypted as soon as it is received from the secure server. We realize that
many, many sites, including large corporate sites, do not take these precautions
3. When should I use the secure server?- Top
You should use the secure server for collecting sensitive info such as a customers credit card info.
4. How do I access the server securely?
- Top
Access to the SSL server is made by changing the URL to begin with https://
and the rest of the domain will change according to the instructions that follow:
The method for accounts with their own certificates: (You will need to purhcase
a certificate from Verisign or Thawtre - please coordinate this with support before you purchase)
You'll call it using:
https://domainname.com/filename.html
And place files to be accessed securely in /home/username/domainname-secure
(which is a link to domainname-www)
For the above example using your own certificate, you'd use:
https://domainname.com/orderform.html
__________________________________________________
Back to Top
|
