SSL Certificate installation fail
Answered
Running v4.2 on a windows machine, I need to install an SSL certificate so that https to the server works without the warning page.
I have created an SSL certificate (from sslforfree), followed NX instructions to modify the cert.pem file, however it fails to work, and the cert.pem appears to revert/change when the server is started again.
The SSL certificate I have purchased has format -----BEGIN RSA PRIVATE KEY----- so this might be to do with it?
-
Possibly some info was missed in the certificate and the software decided to generate the self-signed one automatically. Could you please help to put the certificate again, and collect the server debug log during the service launched?
For the instruction, please refer to the article here.
Thank you.0 -
The cert you generated on sslforfreel is similar to the auto-generated cert of Nx, so won't resolve the warning you receive. To get rid of the warning you either need, an expensive certificate from a listed authority.
But the most easy thing is to add the site to the trusted domains in your browser settings.In this way you don't need another certificate, and you can use the auto-generated certificate of Nx Witness.
For Firefox:
- Settings
- Preferences
- Privacy & Security
- Certificates
- View Certificates
- Servers
- Add Exception
- Add server URL
- Get Certificate
For Chrome I found THESE instructions.
0 -
thanks, but I'm using https to create events in the API, from an external system, so I think I need to get the certificate installation sorted.
Are you able to advise the minimum level of paid-for ssl required?
0 -
Like my colleague suggested, you may just add the trust IP/URL into the exception list to solve the security warning on the browser. If you have some specific purpose, I just tested the certificate from sslforfree and it should work as expected.
I believe that you've validated the domain on sslforfree console and downloaded the certificate(default format with zip file). Please create a file, name it as cert.pem, and put the content below:
- Copy and paste all the content in private.key
- Copy and append all the content in certificate.crt
After saving the certificate file, go to stop the mediaserver service and replace the cert.pem with the new one. Finally, you should get it to work after the service re-started.However, please pay attention to the expiration date of the certificate - especially for the free plan, they may need to renew it more frequently.
Thanks.0 -
Are password protected SSL private keys supported ? I'm having issues with getting the media server to use my custom SSL.
0
Please sign in to leave a comment.
Comments
5 comments