Posts

Showing posts with the label SSL

OpenSSL CSR Cookbook

Image
The Most Common Usage Making a CSR for www.ballersbank.com and ballersbank.com. using the openssl command on ubuntu or any other kind of linux. openssl req -new -newkey rsa:2048 -nodes -out mycert.csr -keyout myprivate.key -subj "/C=US/ST=CA/L=Irvine/O=Ballers Bank of Amerika/OU=IT Dept/CN=www.ballersbank.com" A CSR With Multiple SAN first thing to do is to make a file called san.cnf with the following, for example [ req ] default_bits       = 2048 distinguished_name = req_distinguished_name req_extensions     = req_ext [ req_distinguished_name ] countryName                = US stateOrProvinceName        = CA localityName               = Irvine organizationName           = Ballers Bank of Amerika commonName                 = ballersbank.com [ req_ext ] subjectAltName = @al...

Wordpress Showing Insecure Icon in Address Bar When Using https

Image
Wordpress Site Shows Insecure Icon in Browser Address Bar When Using https Here's a common scenario: you build a new wordpress site, and then decide to turn on https after it's fully built, as a result some of your image assets are still referenced with http vs https.  Chrome and Firefox will show "insecure" when they are loaded.  This is how to change that broken lock symbol to a closed lock symbol. How to Fix There are add-ons that will try to fix this or you can use URL re-writing, or you could edit the SQL database records and change all http to https.  My preferred method is to dump the WP_POSTMETA and WP_POSTS tables from the Wordpress SQL database, then edit the dump files with vim, then load them back in. The Easy Way Open wp-config.php with an editor such as VIM. Change these lines: Change the http to https to force https mode. The Hard Way - Dump The Tables Dump the Tables The dump Files Using VIM to edit Use this VIM command ...

How to Make A Self Signed SSL Certificate Using apache openssl

Image
Make Your Own Self Signed Certificate Using openssl Step 1: use openssl command this will make a new key called server.key and a new certificate called server.crt. the expiration will be 2 years from now. openssl req -x509 -nodes -days 730 -newkey rsa:2048 -keyout server.key -out server.crt openssl session This command will make a file called server.key, containing your private key, with no password, and a server certificate called server.crt. Make a Certificate Request and A Password Protected Private key openssl req -new -passout pass:"Secret" -keyout priv-pass.key -subj "/CN=asterisk.elevendimensions.com" -out server.csr -sha512 -newkey rsa:2048 making a new private key with password=Secret Decrypt the private key with your password openssl rsa -in priv-pass.key -passin pass:'Secret' | head -n2 decrypting the key References https://www.sslshopper.com/article-how-to-create-and-install-an-apache-self-signed-certificate.html

Install a SSL Certificate into Remote Desktop / Terminal Server using MMC

Image
How to Install a SSL Certificate into Remote Desktop / Terminal Server This little tech tidbit is for those who like to use terminal servers or remote desktop to logon to their servers.  I will explain how to install a trusted certificate into terminal services. The first thing you need to do is the get a SSL certificate as a Standard PEM. You can get free SSL from SSLForFree.com , you should download the certificate and then use SSL Shopper's conversion tool to convert it to PFX/PKCS#12 form.   My advice is to use GlobalSign's AlphaSSL Standard Certificate, which will give you an X509 and a PKCS7.  As for generating a private key, see this How To Guide blog article. Step 0: Use certlm.msc to request a new certificate.  Right Click on Personal->Certificates, and then choose "All Tasks" -> "Advanced Operations" -> "Create Custom Request" thru the pop up menus.  In the Certificate Enrollment's Custom Request, you are going to choos...

Get A Free SSL Certificate and Use Free Conversion Tools

Image
How to Get A Free SSL Certificate A Free SSL? Really? There was a time, not too long ago, perhaps around the dawn of the E-Commerce age, around 2007, when you could be expected to pay over $500 for a single domain Thawte SSL certificate.  Well, those days are long gone. Expensive SSL certificates are a relic of a bygone era. SSL can so expensive if you don't shop around, but now there are now free options. It's called SSLForFree.com and Let's Encrypt. https://www.sslforfree.com  You can get 90 day comodo certificates and a handy reminder to help you remember to renew it.  This is one of the first things you need to do while building your business website . SSL For Free? Finally. Discounted SSL There are some websites that sell discounted SSLs from Comodo. SSL2BUY https://www.ssl2buy.com/ SSL Decoder https://www.sslshopper.com/certificate-decoder.html SSL Converter https://www.sslshopper.com/ssl-converter.html To convert your certificate from a ...

Install SSL Certificate on Amazon Bitnami Wordpress Website

Image
How to Get A Free SSL Certificate and How to Install It SSL Certificates Should Be Free For Everyone Let's Encrypt and SSL For Free are two of the most famous free SSL services out there, with your new Amazon EC2 Bitnami Wordpress virtual machine, you now need an SSL Certificate. Get your free certificate at SSL4Free.com , install it like a boss the hardway using the SSH command line.  In our knowledge base story regarding 31 Tips for Your First Business Website , our advice is to install an SSL Certificate immediately.  Amazon EC2 Bitnami Wordpress is another great way to get a free website, free of hosting charges. We have a list of free hosting options here . You must run it on the free tier. Breaking News for June 2020 SSL For Free is retired and now obsolete.  It has been bought out by comodo. You can only get 3 free certs now.  My recommendation is to use Certbot to automate your certificate renewals thru lets' encrypt. Here's a great how to guide for Amaz...