4 ms·

StartSSL (http://www.startssl.com/?app=1 http://www.startssl.com/?app=1) provides free certificates that are browser-recognised.

• Udo 16y ago
  Thanks for the link, I didn't know them. I just tried it. I generated a certificate for a site of mine, uploaded it, changed the config and the cert was pulled by Firefox. However sadly, the authority of StartSSL was NOT recognized by Firefox. This is what it said in the egregious warning dialog: *-------.com uses an invalid security certificate. The certificate is not trusted because no issuer chain was provided. (Error code: sec_error_unknown_issuer)* StartSSL does not work for me. Unless I did something wrong, which happens from time to time. I verified that the StartSSL cert I installed was downloaded by FF, it just doesn't recognize StartCom as a trusted cert authority (apparently). Can anyone confirm this? Edit2: You guys were right, thanks! I did paste the intermediate certificate into the wrong file, my bad! It works!
  • smw 16y ago
    Off the top of my head, you probably didn't include the intermediate certificate. Read #31 on the faq: "Why does Firefox present a warning when connecting to my website?" http://www.startssl.com/?app=25 http://www.startssl.com/?app=25
  • erikano 16y ago
    If you're using nginx, check out [1] for instructions on how to get it working. [1]: http://blog.dembowski.net/2010/02/25/startssl-and-nginx/ http://blog.dembowski.net/2010/02/25/startssl-and-nginx/
• erikano 16y ago
  I've been using StartSSL for quite some time, and only wget has been unwilling to accept it (whereas curl, firefox and chrome have all accepted it): ERROR: cannot verify [site]'s certificate, issued by `/C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Class 1 Primary Intermediate Server CA': Self-signed certificate encountered. To connect to [site] insecurely, use `--no-check-certificate'.
  • pyre 16y ago
    Or you could download their certificate locally...