Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

SSL Certificate [closed]

Tags:

ssl

openssl

I am building a buy-system and i was told to set up an SSL certificate on my web-server to work with bank operations.

I am new to this and i don't exactly understand the difference between OpenSSL (which is free and opensourced) and SSL certificates, that are needed to be bought (thawte.com).

I guess OpenSSL is smth like tool to create a keys (ive alredy done this for firstdata.com), but if i buy ssl certificate on thawte.com and install it ill have my web-site running over https?

Can i use free openSSL to work with banks? Or i have to buy one?

like image 370
Dmitry Avatar asked Nov 12 '10 10:11

Dmitry


People also ask

What happens if SSL certificate expires?

If you allow a certificate to expire, the certificate becomes invalid, and you will no longer be able to run secure transactions on your website. The Certification Authority (CA) will prompt you to renew your SSL certificate prior to the expiration date.

What is an SSL certificate?

An SSL certificate is a digital certificate that authenticates a website's identity and enables an encrypted connection. SSL stands for Secure Sockets Layer, a security protocol that creates an encrypted link between a web server and a web browser.


1 Answers

The biggest difference between a self-issued (with OpenSSL) certificate and one you buy from thawte (or somewhere else) is that of trust. If you want your users to use access your ssl enabled website without being prompted for "do you trust the certificate from this issuer?" you need to buy a certificate from a trusted certification authority, such as thawte or one of the others.

Your website will run over https with any old x.509 certificate so if you only have a few people accessing your ssl site you may convince them to trust your self-issued certificate and save the money for the certificate.

like image 147
Klaus Byskov Pedersen Avatar answered Sep 21 '22 18:09

Klaus Byskov Pedersen