SSL
From Apis Networks Wiki
Contents |
Overview
SSL is used to encrypt communication between the client and server when browsing your Web site. SSL is recommended if you are directly handling credit cards through your Web site. Due to the manner in which SSL authenticates to begin encryption (handshake -> encryption -> HTTP headers), you need a unique IP address to use a SSL certificate.
How much is a unique IP address?
IP addresses in the 64.22.68.x range are provided at a flat rate of $2.50 per month. Please file a ticket within the control panel to get started with the switchover. Note that as we are transitioning your site from a shared IP address to a unique one, in order to ensure zero downtime in the transfer over, we will require 24 hours advanced notification prior to making the adjustment. This 24 hour window is setup to ensure DNS servers don't cache the wrong IP address for up to 24 hours. As long as you are using our nameservers you don't need to worry about making the changes to DNS.
Certificates
Can I use a self-signed certificate?
Yes, you may. Just provide us with the key and CRT or file a ticket for us to generate one.
Can you help me setup a certificate?
A certificate requires three things, (1) a private key used to encrypt the data, (2) certificate signing request to request signage of the key (CSR), and (3) an trusted certificate authority to provide a CRT saying this key should be universally trusted. The difference between a self-signed certificate and certificate signed by a CA is about $25-$50 and a nag window.
We can provide you with a private key and CSR to send to a CA for a CRT. When requesting a CSR please be sure to provide:
- Common name, i.e. hostname for which the SSL will be valid, e.g. www.apisnetworks.com -> https://www.apisnetworks.com
- Country, State/Province, City
- E-mail address, which will be listed in SSL certificate
- Optional company, organization unit
-nodes option to openssl when generating a certificateRecommended SSL providers
We recommend going through ThePlanet's partnership with GeoTrust for the best cost savings.
See Also
- OpenSSL Weekly Tip
