Shulou(Shulou.com)06/01 Report--

This article mainly explains "how to apply for free SSL Certificates." The explanation in this article is simple and clear, easy to learn and understand. Please follow the ideas of Xiaobian and study and learn "how to apply for free SSL Certificates" together!

About SSL Certificates

SSL Certificates are digital certificates similar to electronic copies of driver's licenses, passports and business licenses. SSL Certificates are designed and developed by Netscape Communication by establishing a Secure Socket Layer (SSL) security protocol between client browsers and Web servers. This security protocol is mainly used to provide authentication for users and servers; encrypt and hide transmitted data; and ensure that data is not changed during transmission, i.e. data integrity, and has become a global standard in this field. Since SSL technology is built into all major browsers and WEB server programs, it is only necessary to install a server certificate to activate the feature.) That is, it can activate SSL protocol to realize encrypted transmission of data information between client and server, and prevent leakage of data information. The security of the information transmitted by both parties is guaranteed, and the user can verify whether the website he visits is authentic and reliable through the server certificate.

Apply for certificate from CA organization for tens of thousands of dollars a year, it is not cost-effective, fortunately, there is no shortage of free lunch on the Internet, StartSSL is a good choice.

Under what circumstances do I need SSL Certificates?

1. Shopping transaction function

Needless to say, Alipay, Tenpay and so on will certainly be encrypted to protect your password security.

2. Registration class function

Some large sites, registered members or landing time, will be dedicated through SSL channels to protect your password security. For example, Baidu member center login data transmission channel

SSL Certificates on StartSSL Application Process:

Step 1: Register for a StartSSL account for free

1. StartSSL official website

Official website address: www.startssl.com/

After entering the official website, we have seen various free and paid programs he offers. The free one is the free one on the far right. We started to register the account registration address (https://www.startssl.com/SignUp). We must have an account before we can apply.

2. Sign up for a free account

Fill in your profile to register for a StartSSL account.

3. Enter the Captcha in the email and you can start generating your private certificate. The option defaults.

4. Install the certificate to the browser. Take chrome as an example:

5. Done, click 'Backup this Certificate' to backup your certificate, certificate is the only way to verify your identity, if lost can only re-register account, at this time the certificate has been installed in the browser, so you can also backup certificate from the browser.

Verify Domain Name

Domain name ownership needs to be verified before certificates can be created.

1. Go to the Control Panel (you may need to click Authenticate and use the certificate generated in the previous step to see the illustrated page), select Validations Wizard, and select Domain Name Validation as the type.

2. Enter the domain name.

3. Select a valid mailbox to receive the Captcha. You can use the mailbox in WHOIS domain name or the default website manager mailbox (if there is no mailbox with domain name, you can choose to use Netease free enterprise mail and other services).

4. After receiving the email, enter the Captcha from the email.

5. Domain owner verification successful.

generate a certificate

1. Select Certificates Wizard to enter SSL Certificates Generation Wizard, Certificate Destination Select Web Server SSL/TLS Certificate

2. Enter a 10-32 digit password to generate a secret key.

3. Backup the key, saving the contents of the text box as a text file, such as ssl.key.

4. Select the domain name verified in the previous step.

5. Add a subdomain name.

6. Confirm domain name subdomain information and prepare to generate certificate.

7. Back up the generated certificate and save the text box contents to a text file, such as ssl.crt. Download the intermediate certificate sub.class1.server.ca.pem at the intermediate link below.

decryption key

Before using the certificate, you need to decrypt the generated secret key. You can use the command openssl rsa -in ssl.key -out ssl_decrypted.key, or the tool provided by StartSSL: Tool Box - Decrypt Private Key. The generated content is saved as a file, such as ssl_decrypted.key.

import a certificate

Log in to Synology NAS DSM, go to Control Panel- DSM Settings- HTTP Services-Import Certificate, select the file generated above:

1. Key ssl_decrypted.key decrypted.

2. Certificate ssl.crt.

3. The intermediate certificate sub.class1.server.ca.pem can be found here if you forgot to download it earlier.

Click OK to restart the web server.

SSL Certificates are installed, and there will be no more annoying warnings when accessing NAS. The light green lock on the edge of the address bar clearly tells you that you have been authenticated and that the website identity is valid and trustworthy.

TIP:

1. StartSSL certificate is valid for one year, and you can re-apply after expiration.

2. Repeat the above to request certificates for multiple subdomains.

3. Certificates can be retrieved at any time from Tool box - Retrieve Certificate, but the secret key can only be obtained when the certificate is generated, and the certificate and secret key are valid only when paired, so remember to keep your secret key.

Thank you for reading, the above is "how to apply for free SSL Certificates" content, after the study of this article, I believe that we have a deeper understanding of how to apply for free SSL Certificates, the specific use of the need for everyone to practice verification. Here is, Xiaobian will push more articles related to knowledge points for everyone, welcome to pay attention!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.