Free and almost free SSL certificates

Discussion in 'Windows Server' started by Myrrh, Nov 26, 2009.

  1. Myrrh

    Myrrh MDL Expert

    Nov 26, 2008
    1,401
    500
    60
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. sebus

    sebus MDL Guru

    Jul 23, 2008
    5,893
    1,780
    180
    Thank you, that is really useful info!

    sebus
     
  3. applegate

    applegate MDL Member

    Aug 1, 2009
    226
    51
    10
    Thanks,

    I tested the free SSL certificaat (one year valid) for my private OWA mail server.

    *** PASSED ***
     
  4. OleBent

    OleBent MDL Member

    Aug 22, 2007
    122
    1
    10
    Are the certs in class 1 usable also for Exchange 2007/2010....
    With SAN names and all?
     
  5. applegate

    applegate MDL Member

    Aug 1, 2009
    226
    51
    10
  6. crus

    crus MDL Novice

    Feb 17, 2009
    16
    0
    0
    Hi guys,

    this sounds really interesting...
    But do you think that this is safe? I also would like to use this for my private OWA-Access.

    But maybe they will collect personal information in the background or what do you think? Is this really a serious source?

    Thanks in Advance.


    Best regards,
    Crus
     
  7. Myrrh

    Myrrh MDL Expert

    Nov 26, 2008
    1,401
    500
    60
    100% legit as far as I can tell. The fact that their CA root is in Microsoft's root certificates (and most other major browsers) says a lot.

    You really need class 2 to secure Exchange 2007/2010, as the class 1 certs don't support multiple names. With class 1 you can secure "mail.mydomain.com" just fine but when your local outlook clients go looking for "myserver.mydomain.com" they'll complain about a mismatched certificate. Class 2 lets you do the multiple names and also wildcards (*.mydomain.com).

    Not free anymore, but $40 is by far the cheapest way I've found to do that.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. OleBent

    OleBent MDL Member

    Aug 22, 2007
    122
    1
    10
    I too think the the legitimacy of startssl looks fine.

    Have also concluded that it do seem in order to get Exchange 2007/2010 fully working with everything you do need a cert with more than the two SANs they give you for free,

    Still a great offer and $ is nothing in comparison to others.
     
  9. FreeStyler

    FreeStyler MDL Guru

    Jun 23, 2007
    3,503
    3,614
    120
    Another way to get a (free) valid SSL certificate is to install to install Windows Home Server (in installed it on VirtualBox), create your own homeserver.com domain and then export the key
    On another box (in my case my real server) you can import that key again, i use this particular certificate for secure remote desktop sessions connecting to my server -> ***.homeserver.com (valid to 2015)
     
  10. abuttino

    abuttino MDL Junior Member

    Dec 26, 2008
    67
    0
    0
    It won't be from a trusted root and you'll have users complaining about it.

    I have used a StartSSL ever since I started to learn Exchange. That $40 was VERY well spent. It has really given me an opportunity to learn the server software the way it really should work.

    If you or anyone you know is serious about getting an SSL Certificate, but cannot justify the cost, StartSSL is probably the way to go.

    (Very satisfied customer)
     
  11. FreeStyler

    FreeStyler MDL Guru

    Jun 23, 2007
    3,503
    3,614
    120
    Says who?
    Not true, my Certificate obtained through Windows Home Server is a trusted root certificate from GoDaddy, so that remark is entirely bull...
     
  12. abuttino

    abuttino MDL Junior Member

    Dec 26, 2008
    67
    0
    0
    What is that SSL responsible for? WHS activities? I seriously doubt it functions with Exchange as a SAN or WC cert.
     
  13. FreeStyler

    FreeStyler MDL Guru

    Jun 23, 2007
    3,503
    3,614
    120
    i never said it would function as SAN or WC cert, you said it isn't signed by a trusted root, i said it is.
    Anyway on WHS it is used for https connection to remote access the WHS shares over internet.
     
  14. abuttino

    abuttino MDL Junior Member

    Dec 26, 2008
    67
    0
    0
    I was speaking a little more commercially than that.. Like FTP/Exchange etc.
     
  15. FreeStyler

    FreeStyler MDL Guru

    Jun 23, 2007
    3,503
    3,614
    120
  16. Simon3264

    Simon3264 MDL Novice

    Aug 27, 2009
    31
    1
    0
    is there free SSL certificates for intranet servers?
     
  17. ary.xiao

    ary.xiao MDL Novice

    Jun 3, 2009
    5
    0
    0
    Opera don't trust startssl
     
  18. Apokrif

    Apokrif MDL Addicted

    Dec 7, 2008
    542
    34
    30
    BTW: It is probably obvious from FreeStyler example:
    WHS lets you get free SSL certificate only for [somename].homeserver.com domain name - not for a "vanity" one. ;)