<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Kurinchi Blogger Scribbles ... &#187; ssl</title>
	<atom:link href="http://kurinchilamp.kurinchilion.com/tag/ssl/feed" rel="self" type="application/rss+xml" />
	<link>http://kurinchilamp.kurinchilion.com</link>
	<description>On Open Source Technologies</description>
	<lastBuildDate>Mon, 02 Jan 2012 06:14:45 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3</generator>
		<item>
		<title>How to move the SSL certificates?</title>
		<link>http://kurinchilamp.kurinchilion.com/2010/05/how-to-move-the-ssl-certificates.html</link>
		<comments>http://kurinchilamp.kurinchilion.com/2010/05/how-to-move-the-ssl-certificates.html#comments</comments>
		<pubDate>Thu, 06 May 2010 00:29:01 +0000</pubDate>
		<dc:creator>kurinchilamp</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[LINUX]]></category>
		<category><![CDATA[cpanel]]></category>
		<category><![CDATA[migrating ssl]]></category>
		<category><![CDATA[moving SSL certs]]></category>
		<category><![CDATA[ssl]]></category>
		<category><![CDATA[ssl certificates]]></category>
		<category><![CDATA[whm]]></category>

		<guid isPermaLink="false">http://kurinchilamp.kurinchilion.com/?p=831</guid>
		<description><![CDATA[Migrating SSL certificates: CPanel, WHM Possible Scenarios i) Server load balancing ii) Moving web sites between servers Find where the SSL certificates, private keys are installed in the old server and gzip the certs $ tar -zxcf /tmp/crt.tar.gz /etc/ssl/certs $ tar -zxcf /tmp/priv.tar.gz /etc/ssl/private In the new server, extract the certificates and keys to its [...]]]></description>
			<content:encoded><![CDATA[<p><strong>Migrating SSL certificates: CPanel, WHM</strong></p>
<p>Possible Scenarios<br />
i) Server load balancing<br />
ii) Moving web sites between servers</p>
<p>Find where the SSL certificates, private keys are installed in the old server and gzip the certs<br />
<strong>$ tar -zxcf /tmp/crt.tar.gz /etc/ssl/certs<br />
$ tar -zxcf /tmp/priv.tar.gz /etc/ssl/private</strong></p>
<p>In the new server, extract the certificates and keys to its respective folder location. Edit<strong> httpd.conf </strong>file and add the following lines<br />
<strong><br />
SSLEngine on<br />
SSLCertificateFile /etc/ssl/certs/example.com.crt<br />
SSLCertificateKeyFile /etc/ssl/private/example.com.key<br />
SSLCACertificateFile /etc/ssl/certs/example.com.cabundle<br />
CustomLog /usr/local/apache/domlogs/exampleuser-ssl_log combined</strong></p>
<p>Sample virtual host configuration setting</p>
<pre>
&lt;VirtualHost xxx.xxx.xxx.xxx:443&gt;
    ServerName subdomain.example.com
    ServerAlias www.subdomain.example.com
    DocumentRoot /home/emaple/public_html
    ScriptAlias /cgi-bin/ /home/example/public_html/cgi-bin/
    SSLEngine on
    SSLCertificateFile /etc/ssl/certs/example.com.crt
    SSLCertificateKeyFile /etc/ssl/private/example.com.key
   SSLCACertificateFile /etc/ssl/certs/example.com.cabundle
  CustomLog /usr/local/apache/domlogs/exampleuser-ssl_log combined
    SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
    &lt;Directory "/home/example.com/public_html/cgi-bin"&gt;
        SSLOptions +StdEnvVars
    &lt;/Directory&gt;

    # To customize this VirtualHost use an include file at the following location
    # Include "/usr/local/apache/conf/userdata/ssl/2/exampleuser/example.com/*.conf"
&lt;/VirtualHost&gt;
</pre>
<p>Restart apache<br />
<strong>$ /etc/init.d/httpd restart</strong><br />
(or)<br />
<strong>$ /sbin/service httpd restart</strong></p>
<p>Note: Once moving the SSL certificates to the new server, you can also use WHM or CPanel to configure the certs.</p>
]]></content:encoded>
			<wfw:commentRss>http://kurinchilamp.kurinchilion.com/2010/05/how-to-move-the-ssl-certificates.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SSL Error: Revocation information for the security certificate for this site is not available.</title>
		<link>http://kurinchilamp.kurinchilion.com/2010/02/ssl-error-revocation-information-for-the-security-certificate-for-this-site-is-not-available.html</link>
		<comments>http://kurinchilamp.kurinchilion.com/2010/02/ssl-error-revocation-information-for-the-security-certificate-for-this-site-is-not-available.html#comments</comments>
		<pubDate>Wed, 03 Feb 2010 09:51:31 +0000</pubDate>
		<dc:creator>kurinchilamp</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[LINUX]]></category>
		<category><![CDATA[Certificate revocation]]></category>
		<category><![CDATA[ssl]]></category>
		<category><![CDATA[SSL Error]]></category>

		<guid isPermaLink="false">http://kurinchilamp.kurinchilion.com/?p=749</guid>
		<description><![CDATA[SSL Error: Revocation information for the security certificate for this site is not available. Do you want to proceed? Solutions: i) Install the root CA under Trusted Certificate Authority or, ii) Add an exception to the browser filter not to check certificate revocation or, iii) Programatically handle the SSL stream when request is made from [...]]]></description>
			<content:encoded><![CDATA[<p><strong>SSL Error: Revocation information for the security certificate for this site is not available. Do you want to proceed?</strong></p>
<p><strong>Solutions:</strong><br />
i) Install the root CA under Trusted Certificate Authority or,<br />
ii) Add an exception to the browser filter not to check certificate revocation or,<br />
iii) Programatically handle the SSL stream when request is made from the server</p>
]]></content:encoded>
			<wfw:commentRss>http://kurinchilamp.kurinchilion.com/2010/02/ssl-error-revocation-information-for-the-security-certificate-for-this-site-is-not-available.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SSL: Points to consider before choosing the right certificate</title>
		<link>http://kurinchilamp.kurinchilion.com/2009/11/ssl-points-to-consider-before-choosing-the-right-certificate.html</link>
		<comments>http://kurinchilamp.kurinchilion.com/2009/11/ssl-points-to-consider-before-choosing-the-right-certificate.html#comments</comments>
		<pubDate>Tue, 17 Nov 2009 01:00:58 +0000</pubDate>
		<dc:creator>kurinchilamp</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[certificate security]]></category>
		<category><![CDATA[certificate warranty]]></category>
		<category><![CDATA[ecommerce]]></category>
		<category><![CDATA[https]]></category>
		<category><![CDATA[secure data transfer]]></category>
		<category><![CDATA[ssl]]></category>

		<guid isPermaLink="false">http://kurinchilamp.kurinchilion.com/?p=716</guid>
		<description><![CDATA[Points to consider before choosing the SSL certificate i) Strength of the encryption offered by the certificates ii) Browser comptability or recognition of the certificates. A well known brand is recognized by most of the browsers in the market iii) If the certificate offers backward comptability across browsers offering iv) Whether the Certification Authority (CA) [...]]]></description>
			<content:encoded><![CDATA[<p><strong>Points to consider before choosing the SSL certificate</strong></p>
<p>i) Strength of the encryption offered by the certificates</p>
<p>ii) Browser comptability or recognition of the certificates. A well known brand is recognized by most of the browsers in the market</p>
<p>iii) If the certificate offers backward comptability across browsers offering </p>
<p>iv) Whether the Certification Authority (CA) is a Trusted Root or if they use a Chained Root Certificates. </p>
<p>v) Which web server will be used for SSL installation. Chained root certificates may be little complicated on some web servers.</p>
<p>vi) Nature of the application that will be served over the SSL &#8211; depending on the volume of the transactions and the value of each transaction</p>
<p>vii) Warranty offered by the certificate (if that matters which most certainly is when it comes to ECommerce products)</p>
]]></content:encoded>
			<wfw:commentRss>http://kurinchilamp.kurinchilion.com/2009/11/ssl-points-to-consider-before-choosing-the-right-certificate.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

