Update SSL certificate
Pirate Praveen
Public
Seen by 11
Joe Bivins - 4 ദിവസങ്ങള് മുന്പ്
The SSL certificate on this domain will be expiring in about 5 - 6 weeks. Let me know how you want to renew it.
Joe B Tue 3 Dec 2013 10:08PM
I have not heard from anyone about how to make a payment using the IPXcore account. I'll plan to renew the SSL certificate from GoDaddy tomorrow (it's the easiest option for me to do without changing name server records) unless I hear from someone.
Pirate Praveen Wed 4 Dec 2013 4:57AM
@manukrishnantv @anisha can you create IPXcore account and share with @joeb ?
Manu Krishnan T V Wed 4 Dec 2013 7:23AM
@joeb I have created an account with IPXCore and have added an SSL Certificate to the cart. Will share the login details by mail.
Manu Krishnan T V Wed 4 Dec 2013 10:04AM
Thanks @joeb for the payment. I have generated the CSR for the SSL Certificate and is waiting for it to be sent by mail. Will update that in server once I get hold of it.
Manu Krishnan T V Wed 4 Dec 2013 12:38PM
Updated SSL certificate to the new AlphaSSL from IPXCore. If anyone is experiencing issues, please report. Feels like its something the users must be aware of. So, can someone update there?
Pirate Praveen Thu 5 Dec 2013 7:55AM
@manukrishnantv Stream is mostly silent today, I was wondering if the certificate change has anything to do with it.
Pirate Praveen Thu 5 Dec 2013 8:02AM
ah we are not getting any updates from other pods, but our posts are reaching others (checked in diasp.org)
Pirate Praveen Thu 5 Dec 2013 8:10AM
updated https://poddery.com/posts/878481
Manu Krishnan T V Thu 5 Dec 2013 9:18AM
@praveenarimbrathod In the production log, there was an error "Peer certificate cannot be authenticated with given CA certificates" I have restarted the pod again and now no log entries with that error are shown. Lets wait a while to confirm its working.
Btw, I tried asking in #diaspora on FreeNode, but no responses yet.
Pirate Praveen Thu 5 Dec 2013 11:35AM
@manukrishnantv http://www.sslshopper.com/ssl-checker.html#hostname=https://poddery.com/ looks like we need to add GlobalSign's Intermediate CA too!
Pirate Praveen Thu 5 Dec 2013 12:02PM
@manukrishnantv lets try and fix other issues suggested here https://sslcheck.globalsign.com/en_US/sslcheck?host=poddery.com#194.103.16.69-ssl once we fix this
Manu Krishnan T V Thu 5 Dec 2013 3:46PM
Finally the issue with "Peer certificate cannot be authenticated with given CA certificates" is solved. Feels like its an issue with the order of certificates to be placed in the .pem file for nginx. Actually the order is: Site SSL -> Global Sign -> AlphaSSL
Pirate Praveen Thu 5 Dec 2013 4:01PM
@manukrishnantv thanks for hours of hard work!
Joe B · Thu 28 Nov 2013 1:46PM
I'll need the credentials to the account so that I can make the payment.