[OT] Help needed to install Verisign cert on Mac OS X 10.5

[Pier Kuipers]

Hi all,

Pulling my hair out - I purchased a Secure Site cert from Verisign (I
know, should have gone for Pascal's QualitySSL, but client insisted)
and now I'm having terrible trouble installing it on my server. I even
revoked the cert and got a new one, thinking I'd messed up the private
key or something, but it just won;t work no matter what I try.

If there's anyone out there who can help me I'd be very happy. Paying job, btw.

thanks

Pier

--
Pier Kuipers
Visual ID
Unit S02
Synergy Centre
ITT Tallaght
Dublin 24
Ireland
Tel. [phone]
Mobile [phone]
Web http://www.visualid.com

--
This list is a free service of LassoSoft: http://www.LassoSoft.com/
Search the list archives: http://www.ListSearch.com/Lasso/Browse/
Manage your subscription: http://www.ListSearch.com/Lasso/

[Pier Kuipers]

Hi All,

Pascal Geuns kindly saved the day! Thanks to all who jumped in to
help, it really makes me realise what a great community we have in
Lasso Land. Pascal happened to be in the right timezone at the right
time, so to speak.

I'll make sure to convince my client to get a QualitySSL cert the next time!

Cheers

Pier

On Fri, Oct 30, 2009 at 1:10 AM, Pier Kuipers <pierkuipers@...> wrote:

> Hi all,
>
> Pulling my hair out - I purchased a Secure Site cert from Verisign (I
> know, should have gone for Pascal's QualitySSL, but client insisted)
> and now I'm having terrible trouble installing it on my server. I even
> revoked the cert and got a new one, thinking I'd messed up the private
> key or something, but it just won;t work no matter what I try.
>
> If there's anyone out there who can help me I'd be very happy. Paying job, btw.
>
> thanks
>
> Pier
>
> --
> Pier Kuipers
> Visual ID
> Unit S02
> Synergy Centre
> ITT Tallaght
> Dublin 24
> Ireland
> Tel. [phone]
> Mobile [phone]
> Web http://www.visualid.com
>

--
Pier Kuipers
Visual ID
Unit S02
Synergy Centre
ITT Tallaght
Dublin 24
Ireland
Tel. [phone]
Mobile [phone]
Web http://www.visualid.com

--
This list is a free service of LassoSoft: http://www.LassoSoft.com/
Search the list archives: http://www.ListSearch.com/Lasso/Browse/
Manage your subscription: http://www.ListSearch.com/Lasso/

[Kerry Adams-2]

We've been using QualitySSL for many years now, and couldn't be happier.

And Pascal is awesome to work with!

http://www.qualityssl.com/



Kerry Adams

[ LassoSoft ]
[ www.lassosoft.com ]
[ 954.302.3526 - 888.286.7753 ]

------------------------------------------------



Pier Kuipers wrote:

> Hi All,
>
> Pascal Geuns kindly saved the day! Thanks to all who jumped in to
> help, it really makes me realise what a great community we have in
> Lasso Land. Pascal happened to be in the right timezone at the right
> time, so to speak.
>
> I'll make sure to convince my client to get a QualitySSL cert the next time!
>
> Cheers
>
> Pier
>
> On Fri, Oct 30, 2009 at 1:10 AM, Pier Kuipers <pierkuipers@...> wrote:
>  
>> Hi all,
>>
>> Pulling my hair out - I purchased a Secure Site cert from Verisign (I
>> know, should have gone for Pascal's QualitySSL, but client insisted)
>> and now I'm having terrible trouble installing it on my server. I even
>> revoked the cert and got a new one, thinking I'd messed up the private
>> key or something, but it just won;t work no matter what I try.
>>
>> If there's anyone out there who can help me I'd be very happy. Paying job, btw.
>>
>> thanks
>>
>> Pier
>>
>> --
>> Pier Kuipers
>> Visual ID
>> Unit S02
>> Synergy Centre
>> ITT Tallaght
>> Dublin 24
>> Ireland
>> Tel. [phone]
>> Mobile [phone]
>> Web http://www.visualid.com
>>
>>    
>
>
>
>  

--
This list is a free service of LassoSoft: http://www.LassoSoft.com/
Search the list archives: http://www.ListSearch.com/Lasso/Browse/
Manage your subscription: http://www.ListSearch.com/Lasso/

[Lars A Gundersen]

This is relevant to my interests....

But I'm just starting to get to grips with what it takes to secure a  
portion of my website. First question: I can't see the QualitySSL root  
certificate in my Mac OS X keychain. I thought it had to be there for  
the browser to not display an 'untrusted' warning. Or is not that the  
way it works? Sorry for the basic question, but I tried to get a  
Verisign certificate a couple of years ago to use for Wireless radius  
authentication, and it was incredibly frustrating because I could not  
find good, consise documentation on many of the issues.

I can see that QualitySSL comes highly recommended, so it seems like a  
good candidate for trying to dive into that again. They promise to  
give you customized installation instructions for your webserver. Are  
those easy to follow (running Apache)?

Lastly, is it possible to secure only a subsection of the web hierarchy?

Thanks for any answers!

Lars

On 30. okt. 2009, at 19.23, Kerry Adams wrote:

>
> We've been using QualitySSL for many years now, and couldn't be  
> happier.
>
> And Pascal is awesome to work with!
>
> http://www.qualityssl.com/
>
>
>
> Kerry Adams
>
> [ LassoSoft ]
> [ www.lassosoft.com ]
> [ 954.302.3526 - 888.286.7753 ]
>
> ------------------------------------------------
>
>
>
> Pier Kuipers wrote:
>> Hi All,
>>
>> Pascal Geuns kindly saved the day! Thanks to all who jumped in to
>> help, it really makes me realise what a great community we have in
>> Lasso Land. Pascal happened to be in the right timezone at the right
>> time, so to speak.
>>
>> I'll make sure to convince my client to get a QualitySSL cert the  
>> next time!
>>
>> Cheers
>>
>> Pier
>>
>> On Fri, Oct 30, 2009 at 1:10 AM, Pier Kuipers  
>> <pierkuipers@...> wrote:
>>
>>> Hi all,
>>>
>>> Pulling my hair out - I purchased a Secure Site cert from Verisign  
>>> (I
>>> know, should have gone for Pascal's QualitySSL, but client insisted)
>>> and now I'm having terrible trouble installing it on my server. I  
>>> even
>>> revoked the cert and got a new one, thinking I'd messed up the  
>>> private
>>> key or something, but it just won;t work no matter what I try.
>>>
>>> If there's anyone out there who can help me I'd be very happy.  
>>> Paying job, btw.
>>>
>>> thanks
>>>
>>> Pier
>>>
>>> --
>>> Pier Kuipers
>>> Visual ID
>>> Unit S02
>>> Synergy Centre
>>> ITT Tallaght
>>> Dublin 24
>>> Ireland
>>> Tel. [phone]
>>> Mobile [phone]
>>> Web http://www.visualid.com
>>>
>>>
>>
>>
>>
>>
>
> --
> This list is a free service of LassoSoft: http://www.LassoSoft.com/
> Search the list archives: http://www.ListSearch.com/Lasso/Browse/
> Manage your subscription: http://www.ListSearch.com/Lasso/
>
>
>

--
This list is a free service of LassoSoft: http://www.LassoSoft.com/
Search the list archives: http://www.ListSearch.com/Lasso/Browse/
Manage your subscription: http://www.ListSearch.com/Lasso/

[Eric Landmann]

On 10/30/09 at 3:30 PM, lars@... (Lars A
Gundersen) wrote:

>But I'm just starting to get to grips with what it takes to
>secure a portion of my website. First question: I can't see the
>QualitySSL root certificate in my Mac OS X keychain. I thought
>it had to be there for the browser to not display an
>'untrusted' warning. Or is not that the way it works? Sorry for
>the basic question, but I tried to get a Verisign certificate a
>couple of years ago to use for Wireless radius authentication,
>and it was incredibly frustrating because I could not find
>good, consise documentation on many of the issues.
>
>I can see that QualitySSL comes highly recommended, so it seems
>like a good candidate for trying to dive into that again. They
>promise to give you customized installation instructions for
>your webserver. Are those easy to follow (running Apache)?
>
>Lastly, is it possible to secure only a subsection of the web hierarchy?
>

I think the Quality SSL cert uses the Comodo root cert.

<http://www.usertrust.com/index.asp>

--Eric


--
This list is a free service of LassoSoft: http://www.LassoSoft.com/
Search the list archives: http://www.ListSearch.com/Lasso/Browse/
Manage your subscription: http://www.ListSearch.com/Lasso/

[Pascal Geuns]

Hi Lars,

> But I'm just starting to get to grips with what it takes to secure a  
> portion of my website. First question: I can't see the QualitySSL  
> root certificate in my Mac OS X keychain. I thought it had to be  
> there for the browser to not display an 'untrusted' warning. Or is  
> not that the way it works?

You are correct, that in order for the roots to be known they must be  
in your keychain.

We use 2 different root certificates one is AddTrust and the other one  
is an Entrust root, which you will find in your Mac OS X keychain. We  
do this in order to achieve the best browser coverage possible.

> Sorry for the basic question, but I tried to get a Verisign  
> certificate a couple of years ago to use for Wireless radius  
> authentication, and it was incredibly frustrating because I could  
> not find good, consise documentation on many of the issues.

Mostly its small details that make an SSL installation fail and thats  
why we take pride in taking care of our customers, so that they are  
never left with an unfinished SSL install.

> I can see that QualitySSL comes highly recommended, so it seems like  
> a good candidate for trying to dive into that again. They promise to  
> give you customized installation instructions for your webserver.  
> Are those easy to follow (running Apache)?

Well thats easy to answer for me, but I think its best you give it a  
try by ordering a free QualitySSL Trial certificate and then you will  
be able to see our customized install instructions and make a test  
install before you commit to use money... (Oh and even trial orders  
come with full install support from our side !)

http://www.qualityssl.com/en/products/ssl-certificates/qualityssl-trial-certificate.lasso

We have also just released an OpenSSL CSR tool, which makes it really  
easy to generate a Certificate Signing Request, have a look at

http://www.qualityssl.com/en/support/openssl-csr-tool.lasso

> Lastly, is it possible to secure only a subsection of the web  
> hierarchy?

Depending on the type of certificate you chose, you can decide to use  
SSL on the domain, subdomain or page level, where page level is  
supported by all certificates, subdomain control requires a wildcard  
certificate and
domain level support requires a so called UCC certificate that enables  
SSL on more then one specific domain name.

Hope this answers your questions. You are also welcome to send me more  
questions off list.

Kind Regards
Pascal

Meet me on Linked in
http://www.linkedin.com/in/pascalgeuns

------------------------------------------------------------------------
Get your FREE 30 day QualitySSL Certificate, visit
http://www.qualityssl.com/
------------------------------------------------------------------------

--
This list is a free service of LassoSoft: http://www.LassoSoft.com/
Search the list archives: http://www.ListSearch.com/Lasso/Browse/
Manage your subscription: http://www.ListSearch.com/Lasso/