免费SSL证书:StartSSL

诡谲

StartSSL是一个免费颁发SSL证书的机构,被多数有Linux背景的软件支持(以Mozilla的Firefox和Thunderbird为首).以前IE是没有StartSSL的根证书的,以至于一段时间IE都会将使用StartSSL证书的网站列为不受信任的网站.但是现在情况有所改观了.所以就推荐一下.StartSSL证书在IE平台上已经可以正常使用的.

另外Chrome,苹果Safari浏览器都可以正常识别StartSSL颁发的证书.但是Opera浏览器不支持.



申请过程有些麻烦,需要验证信息.一般我们按照国内的英文地址写上去就可以了.申请的时候需要验证邮箱的.之后系统会发送一个验证链接给你邮箱,你必须在24小时内点击该地址激活.然后进入面板后会提示你备份StartSSL给你的个人证书,以后就靠这个证书登录控制面板了.除此之后没有其他方式了.

为域名申请StartSSL,需要先验证域名邮箱,一般就是域名后缀的邮箱或者Whois查到的邮箱地址,然后会发送验证码过去.按照要求验证就可以了.另外他的控制面板上的帮助很详细.

nginx配置ssl的资料可以点击这里.

[ 本帖最后由 诡谲 于 2009-11-10 23:21 编辑 ]

咯拉无米

help up

cpuer

The StartSSL™ Free (Class 1) certificates are domain or email validated and mostly referred to as the free certificates. Because the checks are performed mostly by electronic means, they require only minimal human intervention from our side. The validations are here to make sure, that the subscriber is the owner of the domain name, resp. email account. You may find additional information on this subject in our CA policy.

The StartSSL™ Free certificates are intended for web sites which require protection of privacy and prevent eavesdropping. However information presented within these certificates, except the domain name and email address, are not verified. Should you need higher validated certification, please check out our StartSSL™ Verified (Class 2) certificates.

The StartCom Certification Authority, provides the StartSSL™ Free certificates instantly, without limitations and free of charge under the condition, that the subscriber provides his/her complete, correct personal details and accepts the Subscriber Obligations of the StartCom CA Policy. Secure your web server and mail traffic now by using the Certificate Control Panel.

免费的认证资料比较少，玩玩是足够了。

RyoKazami

看上去不错，有得折腾了。

cpuer

SSL对我等不常用，也就玩玩

RyoKazami

上次好像听说IE要支持免费SSL，不知道说的是哪个？

cpuer

微软在九月份的补丁里面有一个根证书更新包含了startssl。

RyoKazami

那么IE应该支持了啊，那可以玩了。

cpuer

是的了，

诡谲

嘿嘿,所以还是可以玩玩了....
我主要是拿来做翻墙加密用的...有一些敏感词就不会被过滤啦.总不能要找点东西就用vpn翻墙吧...忒麻烦了.