Changes between Version 10 and Version 11 of ordering-cartel-x509-certificates

Timestamp:

Feb 26, 2015, 5:53:11 PM (10 years ago)

Author:

Jamie McClelland

Comment:

--

ordering-cartel-x509-certificates

@@ -10 +10 @@
  * Order from https://ssls.com/ (login in [wiki:keyringer keyringer])
  * Purchasing and activating are different steps. First check to see if any x509 certificates have been purchased but not yet activated. If so, activate an already purchased certificate. Otherwise, purchase a new certificate. For payment method, choose paypal (password in [wiki:keyringer keyringer]).  Note that ssls.com does not group purchased-but-not-activated certificate together; you have to page through the order history to search for them.  (As of 4/13/2014, there were purchased-but-not-yet-activated certificates buried on page 8 ...)
- * Puppet will auto-generate a certificate signing request for you, with the canonical name as the "common name" (e.g. `mandela.mayfirst.org`). If you want a different "common name" (e.g. `members.mayfirst.org` or `webmail.mayfirst.org`) then you will need to generate a new csr.
+ * Puppet will auto-generate a certificate signing request for you, with the canonical name as the "common name" (e.g. `mandela.mayfirst.org`) in /etc/ssl/. If you want a different "common name" (e.g. `members.mayfirst.org` or `webmail.mayfirst.org`) then you will need to generate a new csr.
  * Login to the [https://members.mayfirst.org/cp members control panel] and ensure that your email address is listed as a recipient for the `hostmaster@mayfirst.org` email address.
  * Order at least three 5-year standard (domain-validated) PositiveSSL certificates at a time (five years means less admin to update it, and less $ thrown at the cartel because of discounts; as of 2013-06-03 we are switching from RapidSSL to PositiveSSL.).