Private SSl with Dedicated Server

[pinklep]

I was told by my hosting company that the shared certificate that I have isnt compatible with the language php. They also told me that I would need a private/personal ssl and a dedicated server. Now that its set up I am wondering if it was a mistake. I get an alert when moving from unsecure to secure - the alert box says info you exchange with this site cannot be viewed or changed by others. However there is a problem with the sites security certificate. From the online documentation, it sounds like this will always happen b/c of the dedicated server/private ssl. Is this true? I dont like that, if so. I wouldnt register with a site that says there is something wrong with the security certificate! :angry:

 

Any insight you can give me would be appreciated. Thanks.

[Jack_mcs]

It isn't clear what your problem is from your description but it sounds like the ssl was not installed correctly. Since they gave you wrong information about the shared ssl, that would make sense. Please provide a link to the site if you would like a more definitive answer.

 

Jack

[pinklep]

It isn't clear what your problem is from your description but it sounds like the ssl was not installed correctly. Since they gave you wrong information about the shared ssl, that would make sense. Please provide a link to the site if you would like a more definitive answer.

 

Jack

 

My hosting company told me I couldnt use a shared certificate with oscommerce (its not compatible) and sold me a private cert.

In reading the oscommerce online documentation I saw the following comment and want to know if its still the case:

 

"1. Self issued certificates

 

Some people have dedicated servers and even on some shared server you can raise a self issued SSL certification. This does everything as above except the certificate root does not exist in browsers. Therefore your site may be secure (although I do not profess to know if self certificates offer 128 bit encryption), BUT your site visitors will ALWAYS get the alert in Trouble Shooting point 1"

 

Here is trouble shooting pt 1:

 

"Trouble Shooting

 

1. Security Alert

 

The alert box says info you exchange with this site cannot be viewed or changed by others. However there is a problem with the sites security certificate.

 

The box has 3 levels of alert which are:

 

The certificate is from a trusted certifying authority - Green tick for good or Red cross for bad will show

The company you get your SSL certificate from should have a trusted root certificate installed.

 

The security certificate date is valid - Green tick for good or Red cross for bad will show

You need to extend the certificates validity - refer to the issuer.

 

The name on the security certificate is invalid or does not match the name of the site - Green tick for good or Red cross for bad will show"

 

Did you want my website or were you referring to the online documentation?

 

Thanks for your help.

[satish]

if there is the slightest of change in the certificate issues too and your site name.

Say www.site.com and site.com then too such warning will be generated.

please do put u r site URl to analyse

 

Satish

[pinklep]

if there is the slightest of change in the certificate issues too and your site name.

Say www.site.com and site.com then too such warning will be generated.

please do put u r site URl to analyse

 

Satish

 

www.camillesboutiqueshop.com/store

[pinklep]

www.camillesboutiqueshop.com/store

 

I think I figured it out. I think the online comment is misleading.

[Jack_mcs]

My hosting company told me I couldnt use a shared certificate with oscommerce (its not compatible) and sold me a private cert.

In reading the oscommerce online documentation I saw the following comment and want to know if its still the case:

 

"1. Self issued certificates

 

Some people have dedicated servers and even on some shared server you can raise a self issued SSL certification. This does everything as above except the certificate root does not exist in browsers. Therefore your site may be secure (although I do not profess to know if self certificates offer 128 bit encryption), BUT your site visitors will ALWAYS get the alert in Trouble Shooting point 1"

 

Here is trouble shooting pt 1:

 

"Trouble Shooting

 

1. Security Alert

 

The alert box says info you exchange with this site cannot be viewed or changed by others. However there is a problem with the sites security certificate.

 

The box has 3 levels of alert which are:

 

The certificate is from a trusted certifying authority - Green tick for good or Red cross for bad will show

The company you get your SSL certificate from should have a trusted root certificate installed.

 

The security certificate date is valid - Green tick for good or Red cross for bad will show

You need to extend the certificates validity - refer to the issuer.

 

The name on the security certificate is invalid or does not match the name of the site - Green tick for good or Red cross for bad will show"

 

Did you want my website or were you referring to the online documentation?

 

Thanks for your help.

Your hosting company is incorrect about not being able to use a shared cert with oscommerce. It may be that they do not have a certificate installed on your server, in that case there would not be one to share. You can create a self-signing cert to use, which it sounds like you did, but that will generate a warning on the page and is useless, in my opinion, for a business site. A certificate costs less that $20/year. If you can't use the shared cert, it would be worth it to spend $20 to get a private one.

 

Jack