Changes between Version 3 and Version 4 of ordering-cartel-x509-certificates


Ignore:
Timestamp:
Jun 3, 2013, 3:51:21 PM (7 years ago)
Author:
Ross
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • ordering-cartel-x509-certificates

    v3 v4  
    99 * Puppet will auto-generate a certificate signing request for you, with the canonical name as the "common name" (e.g. mandela.mayfirst.org). If you want a different "common name" (e.g. members.mayfirst.org or webmail.mayfirst.org) then you will need to generate a new csr.
    1010 * Login to the [https://members.mayfirst.org/cp members control panel] and ensure that your email address is listed as a recipient for the hostmaster[at]mayfirst.org email address.
    11  * Order a 2 year RapidSSL certificate (two years means less admin to update it and RapidSSL because you only have to contend with one intermediate certificate).
     11 * Order a 5 year PositiveSSL certificate (five years means less admin to update it, as of 2013-06-03 we are switching from RapidSSL to PositiveSSL.).
    1212 * When filling in the details of the certificate, choose the hostmaster email address for confirmation and for contact info for the certificate. For the rest of the requested information, enter our public [https://mayfirst.org/contact contact info].
    1313 * You will get an email asking for confirmation (click through the link) and then the certificate will be emailed to you.