tj2419 Posted March 17, 2017 Posted March 17, 2017 I have always used startcom for my ssl certificates for hap but not google do not trust them when i need to renew it next week it is an issue. Anyone recommend a new certificate supplier free or cheap? Also is there a specific type I need to get so it works with HAP? Cheers
ZeroHour Posted March 17, 2017 Posted March 17, 2017 (edited) EduGeek has bought certs through these guys in the past: https://www.prontossl.com/ | Their main site: https://www.chesterfieldit.com/ssl-certificates They are UK based which can help with invoicing. EDIT: One thing, we bought the certs for use here not on HAP but ssl certificates are pretty standard so I wouldnt expect any issues using them with HAP. Edited March 17, 2017 by ZeroHour 2
timbo343 Posted March 17, 2017 Posted March 17, 2017 we bought ours from godaddy. Within a matter of hours we were up and running with our HAP install with a standard SSL.
pete Posted March 17, 2017 Posted March 17, 2017 I'm currently using Namecheap or Let's Encrypt depending on whether the OS has a reliable method of automatically renewing the cert (Linux) or not (Windows).
ellsandell Posted March 17, 2017 Posted March 17, 2017 Lets Encrypt might be a good shout, or as above Namecheap.
nickbro Posted March 17, 2017 Posted March 17, 2017 (edited) Another one for Lets Encrypt I recommend https://github.com/Lone-Coder/letsencrypt-win-simple Edited March 17, 2017 by nickbro 1
tj2419 Posted March 20, 2017 Author Posted March 20, 2017 (edited) Thanks for the suggestions. Having a play with lets encrypt. I keep getting an authorisation error at the moment when it tries to contact the .well-known folder. Any ideas why this could be? Thanks Edited March 20, 2017 by tj2419
dry Posted March 21, 2017 Posted March 21, 2017 Thanks for the suggestions. Having a play with lets encrypt. I keep getting an authorisation error at the moment when it tries to contact the .well-known folder. Any ideas why this could be? Thanks If you navigate to the specific file (e.g. yourdomain/.well-known/acme-challenge/random_string), what do you get? I got stuck because I'd created a wildcard MIME type as well as creating a web.config file in the directory with essentially the same instruction. Removing the MIME type (so it wasn't duplicated) fixed it for me. Have you tried using the Let's Encrypt Win Simple command line tool? If so, where does it get stuck?
markwilfan Posted March 21, 2017 Posted March 21, 2017 I use https://cheapsslsecurity.co.uk/ for our wildcard cert. Good value for money I think
tj2419 Posted March 22, 2017 Author Posted March 22, 2017 (edited) If you navigate to the specific file (e.g. yourdomain/.well-known/acme-challenge/random_string), what do you get? I got stuck because I'd created a wildcard MIME type as well as creating a web.config file in the directory with essentially the same instruction. Removing the MIME type (so it wasn't duplicated) fixed it for me. Have you tried using the Let's Encrypt Win Simple command line tool? If so, where does it get stuck? Just keep getting the "This site can't be reached, ERR_Connection_timed_out It is picking the folder up in IIS just not letting me get to in via a browser Edited March 22, 2017 by tj2419
dry Posted March 22, 2017 Posted March 22, 2017 Just keep getting the "This site can't be reached, ERR_Connection_timed_out Double-check your firewall to ensure you've got a rule to allow traffic to your IIS server on port 443/80
tj2419 Posted March 22, 2017 Author Posted March 22, 2017 Double-check your firewall to ensure you've got a rule to allow traffic to your IIS server on port 443/80 Could this still eb an issue if access to HAP is working fine? Just not this folder.
dry Posted March 22, 2017 Posted March 22, 2017 Could this still eb an issue if access to HAP is working fine? Just not this folder. Glad one of us is awake! You're right, it wouldn't be a firewall issue if HAP is accessible! Did you try using Let's Encrypt Win Simple? It automatically copies the random string file, creates the web.config file (to allow files without an extension to be served by IIS- by default, they won't be) and created the bindings
tj2419 Posted March 22, 2017 Author Posted March 22, 2017 Glad one of us is awake! You're right, it wouldn't be a firewall issue if HAP is accessible! Did you try using Let's Encrypt Win Simple? It automatically copies the random string file, creates the web.config file (to allow files without an extension to be served by IIS- by default, they won't be) and created the bindings Haha wouldn't say awake as this has been bugging me for days now! I downloaded letsencrypt-win-simple.V1.9.3 and run the letsencrypt.exe In the back on my mind I think its something to do with the way I have the website setup with not being able to get to that folder. I tried putting just a dummy index.html in the wwwroot folder and that wont load either e.g. hap.schoolwebsite.co.uk/index.html
tj2419 Posted March 22, 2017 Author Posted March 22, 2017 I give up. Would this certificate be the correct one needed? https://cheapsslsecurity.co.uk/comodo/positivessl.html Thanks
markwilfan Posted March 22, 2017 Posted March 22, 2017 I give up. Would this certificate be the correct one needed? https://cheapsslsecurity.co.uk/comodo/positivessl.html Thanks That would be ok but personally I would go for one that is mobile friendly like https://cheapsslsecurity.co.uk/comodo/essentialssl.html If you have more than a few ssl subdomains it may be better value to get a wildcard cert
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now