SSL Issue

[andyhill]

I have purchased a Digital Certificate from GoDaddy but cannot get it to work.

 

Request:

openssl.exe req -new -key nnnnn.nnn.key -out nnnnn.csr

 

Files Validated (all in text format):

Root

Cert

Key

 

https://nnnnn.nnnlocks up and fails to work ?

 

Please advise how to resolve - thanks. 

[Farshad Mohajeri]

Hi Andy,

 

Have you reviewed SSL section in uniGUI docs?

[andyhill]

Yes, my ISP did the cert request for me with the info you suggested in the UniGUI docs.

 

I have asked him to confirm if he did everything required, this is what I sent him (xxxxxxxxx is the domain name):-

 

openssl.exe req -days 365 -nodes -newkey rsa:1024 -keyout xxxxxxxxx-key.pem -out xxxxxxxxx-cert.pem

 

Waiting for his reply ...

[andyhill]

This is what I learned.

 

1) GoDaddy defaults Certificate Length to 2yrs so requesting 365 days failed for me.

 

2) GoDaddy rsa must be 2048, 1024 failed for me.

 

3) openssl.exe req -new -newkey rsa:2048 -nodes -keyout key.pem -out req.csr

 

Once processed and granted.

 

  if SSLFlag = True then begin

    if FileExists(UniServerModule.StartPath + 'Root.crt') = True then begin

      if FileExists(UniServerModule.StartPath + 'Cert.crt') = True then begin

        if FileExists(UniServerModule.StartPath + 'Key.pem') = True then begin

          SSL.SSLOptions.RootCertFile:= UniServerModule.StartPath + 'Root.crt';

          SSL.SSLOptions.CertFile:=     UniServerModule.StartPath + 'Cert.crt';

          SSL.SSLOptions.KeyFile:=      UniServerModule.StartPath + 'Key.pem';  // Possible UniGUI Bug - file must have .pem extension - same file contents with .crt extension fails

          if Trim(SSLPassword) <> '' then begin

            SSL.SSLPassword:= SSLPassword;

          end;

          SSL.SSLPort:= SSLPort;

          SSL.Enabled:= True;

        end;

      end;

    end;

  end;