Search posterous

Search all posts and users. Type a name, type a favorite song title, whatever! See what comes up.
  

More posterous blogs











More recommended blogs »

Here are posterous posts filed under ssl...

Andy Gambles says...

Customers purchasing their RapidSSL, Geotrust, thawte or Verisign SSL certificate from ServerTastic are now able to manage their SSL certificate orders and perform the following actions:

  • Resend approver emails
  • Resend fulfilment emails
  • Re-issue certificates (where purchase allows)
  • Revoke certificates
  • Check status and view comments for org validated and EV certificate orders in process
How cool is that! You no longer need to raise a support ticket to perform any of these actions - you can do them yourself.

"I have heard enough how do I do this?" I hear you all cry. Simply visit the relevant URL below (you can bookmark it) and complete the form. You will require to know the SSL domain, the admin email contact (which you will also require access to) and the captcha.

You will then be shown your order for verification. Click "Select" next to the correct order and then submit to confirm your email address. An email will be sent to the admin contact email address which will contain a unique URL allowing instant access to your order. It sounds a lot more complicated than it actually is. I simply suggest you give it a try!

End User Order Management
RapidSSL and Geotrust branded order management: Click Here
thawte branded order management: Click Here
VeriSign branded order management: Click Here

SSL Certificate Resellers
You can also provide these links to your customer. They are not branded by ServerTastic in anyway so the customer will never know (if that is what you want).

Filed under: SSL

Andy Gambles says...

thawte will be upgrading the site seal servers on 15 October 2009 19 October 2009. After the upgrade any site using the thawte Trusted Site Seal will need to perform an update.

This update applies to ServerTastic customers using SSL123, SSL Web Server and SGC Supercert certificates.

This update must be completed before 18 November 2009 when the existing site seal infrastructure will be disabled.

ServerTastic recommends users re-install the site seal as soon as possible after 15 October 2009 19 October 2009. Details of how to install the thawte Trusted Site Seal are available here.

Filed under: SSL

pressehof says...

Frankfurt am Main - Axway stellt seine it-sa-Teilnahme ganz unter das Motto "Security Means Business". Dazu bietet die Business Interaction Networks Company Interessenten zum Beispiel die Möglichkeit zu Gesprächen mit dem Secure-Sockets-Layer-Erfinder (SSL) Dr. Taher Elgamal. Der Axway Chief Security Officer steuert außerdem drei Keynotes zum Programm der Veranstaltung vom 13. bis 15. Oktober in Nürnberg bei. Axway informiert über seine Produktneuheit Ad-hoc-Datentransferlösung File Transfer Direct sowie über sein umfassendes Lösungsportfolio zur Datensicherheit. Anwender können sich damit gegen Angriffe schützen, Data Leak Prevention etablieren und für sichere...

it-sa 2009: SSL-Erfinder Taher Elgamal und Produktinnovation für sichere Datenübertragung stehen für Axway im Mittelpunkt bei Pressehof komplett lesen

Filed under: SSL

Andy Gambles says...

Over the next few weeks we will be giving away a number of SSL certificates. This will be done via our FaceBook and Twitter pages.

Simply put we will be inserting a link into one of the posts made on FaceBook and Twitter each week. This link will provide give the user the ability to generate a free SSL certificate

But you have to be the first person to use it! If you are too late then the link will state it has already been used!

No purchase is required to qualify all you have to do is keep an eye on our FaceBook and/or our Twitter page. We will post the link simultaneously to both sites so you do not need to follow us on both (but you can if you want to!).

To maximise your chances of obtaining a free SSL certificate it is recommended you either follow us on Twitter an/or you become a fan on FaceBook and whenever you see a link you click it!

Filed under: SSL

hdknr says...

nginxで中間CA証明書を使用する

nginxには中間CA証明書を直接指定するための方法がありません。
そのため、ちょっと面倒ですが、サーバ証明書に追記する必要があります。
サーバ証明書と中間証明書が以下のような形式だとすると、

サーバ証明書

-----BEGIN CERTIFICATE-----
(サーバ証明書の内容)
-----END CERTIFICATE-----

中間CA証明書

-----BEGIN CERTIFICATE-----
(中間CA証明書の内容)
-----END CERTIFICATE-----

サーバ証明書に中間証明書を追記する形で、サーバ証明書を以下のように編集します。

-----BEGIN CERTIFICATE-----
(サーバ証明書の内容)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(中間CA証明書の内容)
-----END CERTIFICATE-----

Filed under: SSL

Andy Gambles says...

The QuickSSL Premium SSL certificate from Geotrust can now be used to secure both the www and the non-www part of a domain with just a single certificate.

In fact the certificate can secure the main domain and up to 3 sub-domains. Those of you with an understanding of SSL certificates will see that this is done by providing 3 SANs within the SSL certificate.

If that wasn't good news on it's own the even better news is that this does not cost any extra with ServerTastic.

But there is some bad news. To enable this on the certificate is a little bit fiddley. I will do my best to describe how to do it (we hope to make this much easier in the future).

Just one other point before we continue this can not be applied to certificates already issued but you can use this with any QuickSSL Premium invites you have not yet used.

When you order a QuickSSL Premium certificate from ServerTastic you will get an enrolment URL sent to you via email like the one below

 

 

Do not click on the URL. Instead copy and paste this into your browsers address bar. Then you must add &SAN=True onto the end of the URL as per the example below.

 

 

Hit enter and you will then be taken to the QuickSSL Premium enrolment screen. The second page of this process is where you would paste your CSR. But you should also see some additional options at the bottom of the page were you can enter up to 3 domains

 

 

Firstly you should completely ignore the Microsoft Small Business Server 2003 text. This is now redundant and we are trying to get this changed.

In the 3 boxes Domain 1, Domain 2 and Domain 3 you can enter the domains you want to secure with this certificate. They must however be part of the main domain.

Here are some examples

CSR: www. servertastic.com
Domain 1: servertastic.com
Domain 2: checkout.servertastic.com
Domain 3: support.servertastic.com

 

CSR: servertastic.com
Domain 1: www. servertastic.com
Domain 2: checkout.servertastic.com
Domain 3: support.servertastic.com

 

As you can see you can either include the www element of your domain in the CSR or as one of the extra domains.

The QuickSSL Premium certificate is available at ServerTastic from just $55.00 a year.

Be sure to leave your questions or comments below if you have any!

 

Filed under: SSL

Andy Gambles says...

There have been a number of attacks aimed at SSL Certificates demonstrated at the recent Black Hat event in Las Vegas. VeriSign have confirmed that non of the certificates issued within the VeriSign group are susceptibale to these attacks. This includes RapidSSL , thawte and Geotrust.

This was confirmed on Tim Callans SSL Blog. I have pasted the relevent excerpts below

Use of null Characters

The focus of this presentation was various ways to use null characters to fool browsers and other pieces of relying software into believing a certificate has been issued to a different domain than the one to which is was actually issued. The idea is that the attack would give the online criminal the ability to put up a certificate on what appears to be the exact same domain name as the targeted site. sslstrip accomplishes this feat through a Man-in-the-Middle attack and uses the null-character certificate to create its false certificates on the fly.


I'm pleased to say that none of VeriSign's SSL Certificates on any brand allow null characters, meaning that you can't use any of our certificates in the attack detailed today. While the fundamental problem needs to be solved by the client software that trusts these certificates, we still prefer not to be contributing to the problem. And until these problems are solved at the source, EV SSL is a great interim solution. The detailed attack will not work against EV SSL (as agreed by Mr. Marlinspike during the Q and A session after his talk), which means that sites have the power to defend themselves against null character attacks and in fact all attacks using sslstrip.

MD2 No Longer Secure

Kaminsky covered several topics which had SSL as a common theme. Interestingly, he also revealed his own work with null characters, which was very similar to Marlinspike's. In addition, Kaminsky talked about pre-image attacks against MD2, which he expects to be viable this calendar year. He reports that MD2 is not trusted or soon to not be trusted on these applications and platforms: Firefox, OpenSSL, Red Hat, Opera, Apple, Microsoft, Google, and VeriSign. Here I can be more specific. As of May 2009, VeriSign is issuing its SSL Certificates on all brands using SHA-1.

Leading Zeros

Kaminsky also described a "leading zero attack," by which a certificate can fool client software by essentially attaching an invisible zero to the first hex character in the certificate. Again, I'm happy to tell you that VeriSign won't issue SSL Certificates with leading zeros on any of our brands.

Filed under: SSL

Andy Gambles says...

VeriSign have announced that they have issued 4 million SSL Certificates since 1995.

Full press release below:

In 14 Years as SSL Pioneer and Market Leader, VeriSign and Its Brands Make Trusted Interactions Possible for Millions of Web Sites and Services

MOUNTAIN VIEW, CA -- (Marketwire) -- July 27, 2009 -- VeriSign, Inc. (NASDAQ: VRSN), the trusted provider of Internet infrastructure services for the networked world, today announced that it has issued more than 4 million Secure Sockets Layer (SSL) Certificates. The total includes certificates issued by VeriSign under all four of its SSL brands: VeriSign®, GeoTrust®, thawte®, and RapidSSL®.

Since 1995, the company has served as a trusted third party and Certificate Authority responsible for issuing and authenticating a range of digital certificates designed to protect online businesses and their customers by:

 

--  Encrypting sensitive information during online transactions
--  Authenticating the identity of certificate owners
--  Warning when certificates are invalid
    

Under its four brands, VeriSign issues, authenticates and manages a range of certificates that are vital to the secure and trusted operation of the Internet, Web-based applications, and services requiring digital IDs, including:

 

--  SSL Certificates. VeriSign provides secure SSL encryption to Web sites
    protected by all VeriSign SSL Certificates brands, enabling trusted e-
    commerce, communications, and interactions on Web sites, intranets, and
    extranets.
--  Extended Validation (EV) SSL Certificates. EV SSL protection provides
    Web users using high security browsers with immediate visual confirmation
    that they've reached a site whose authenticity has been independently
    verified by VeriSign.
--  Server-Gated Cryptography (SGC) Certificates.  VeriSign's SGC
    Certificates enable every Web site visitor to connect using the strongest
    encryption for which their systems are capable.
--  Code Signing Certificates. VeriSign® Code Signing creates a digital
    "shrink-wrap" for code and content to protect software publishers and users
    when they download code and content over the Internet and mobile networks.
--  PKI Certificates. VeriSign protects enterprises, government agencies
    and others with a flexible platform enabling complete management of digital
    certificates for authentication, encryption and digital signing.
    

The milestone of issuing more than 4 million SSL certificates underscores how VeriSign is essential to enabling secure online transactions around the world. The company has issued more than 12,000 EV SSL Certificates, making VeriSign the far-and-away market leader with a 74 percent share of the EV SSL market. And every day, VeriSign conducts up to 1 billion Online Certificate Status Protocol (OCSP) checks -- the most timely and efficient way for Web browsers to determine whether an SSL or user certificate is still valid or has been revoked and a key indicator of secure sessions initiated using VeriSign SSL Certificates.

VeriSign also plays a vital role in Public Key Infrastructure (PKI) deployments, which use digital certificates for authentication, encryption and digital signing. In the past 14 years, VeriSign has issued and managed tens of millions of PKI certificates for thousands of customers throughout the world.

"As the world's leading SSL Certificate Authority, VeriSign understands that when customer trust is paramount, second best is never nearly good enough," said Tim Callan, vice president of product marketing at VeriSign. "Now more than ever, in a marketplace that is truly global and increasingly competitive, protecting a Web site, application or service with VeriSign is an investment that pays dividends every day."

 

Filed under: SSL

Andy Gambles says...

Promotion Ends 31st July 2009!

We are giving away, at random, 10 free RapidSSL certificates (1 year). To qualify for a chance to get a free certificate you must simply become a fan of ServerTastic on Facebook before 31st July 2009.

We will chose 10 fans at random and announce the winners on 5th August 2009 via Facebook.

Filed under: SSL

Andy Gambles says...

ServerTastic is now on Facebook! We have our own page where you can come and tell us how much you love, loathe or hate us (hopefully the former!)

We are a bit lonely at the moment and would really like you to show us some love. Simply click here and then click the "Become a fan" image. You can then post on our wall or start a discussion on the discussion boards.

Plus to help get you motivated we are offering a free RapidSSL certificate (1 Year) to 10 fans selected at random. To qualify for selection you must become a fan on or before 31st July 2009. Winners will be announced on 5th August 2009.

Filed under: SSL