WTF: SnakeOil on my SSL Cert

Discussion in 'Apache' started by sarahk, Jun 8, 2006.

  1. #1
    I'm a great coder but sysadmin reduces me to newbie status, tremors and tears.

    So, I've just moved a site over to a new host and taken the big step of getting dedicated IP and SSL (from GoDaddy). The old host gave me grief releasing the site yada yada and so finally I get to test it and WTF do I see but this:

    [​IMG]

    and then this

    [​IMG]

    How do I get this fixed up?
     

    Attached Files:

    sarahk, Jun 8, 2006 IP
  2. Leo727

    Leo727 Active Member

    Messages:
    161
    Likes Received:
    12
    Best Answers:
    0
    Trophy Points:
    60
    #2
    Don't take it personally - apparently some certs come with that as the default. Try googling snakeoil ssl and you'll find other people with the same thing. Whoever installed the cert on your new host hasn't done everything necessary. I'm not familiar with the process, but my search found this : rename all the snakeoil keys in the ssl.crt, ssl.key and ssl.prm files in the /etc/httpd folder. Also some service on the server may need to be restarted. Unless it's a dedicated server, your host should be doing the whole process for you.
     
    Leo727, Jun 8, 2006 IP
    sarahk likes this.
  3. sarahk

    sarahk iTamer Staff

    Messages:
    28,851
    Likes Received:
    4,542
    Best Answers:
    123
    Trophy Points:
    665
    #3
    Cool, thanks!!!

    I have another site on that server I want SSL for too (in due course) so the learning curve is worthwhile.
     
    sarahk, Jun 8, 2006 IP
  4. forkqueue

    forkqueue Guest

    Messages:
    401
    Likes Received:
    21
    Best Answers:
    0
    Trophy Points:
    0
    #4
    Go and buy an actual SSL cert. Install it.

    Hey presto, no 'snakeoil' cert.
     
    forkqueue, Jun 8, 2006 IP
  5. sarahk

    sarahk iTamer Staff

    Messages:
    28,851
    Likes Received:
    4,542
    Best Answers:
    123
    Trophy Points:
    665
    #5
    Thought that's what I paid GoDaddy to give me. After the snakeoil thing the warnings show that the cert issued for the site...
     
    sarahk, Jun 9, 2006 IP