Update SSL certificate

The post in poddery is not public. So, I can't view it.

@manukrishnantv don't worry, I have copied all of its contents here :) Does knightswarm offer ssl certificates? Which provider do you suggest?

GlobalSign AlphaSSL or Comodo Positive SSL seems fine for our use, as there aren't subdomains for poddery.com, which needs to have SSL.

IPXCore(http://ipxcore.com/ssl/) has an offer for AlphaSSL at $15 per year. Comodo Positive SSL is just $3.75 at GoGetSSL(https://www.gogetssl.com/domain-validation/)

@manukrishnantv , @anisha , decide on a provider and connect with @joeb on when you want to renew it. Once decided ask Joe S to make the payment.

I am comfortable with any, favoring ipxcore, as I have a positive experience from them.

I am also fine with AlphaSSL. So, lets go ahead with ipxcore.

I have a feeling that I would have to transfer the domain to IPXcore to get the SSL certificate at that price. There is a choice that says, "I will update my nameservers on an existing domain" but I don't have an account with IPXcore and the domain isn't registered with them.

@joeb I have an account at ipxcore. I use SSL from there. No need to purchase domain from them.

Ok. Will Joe S. purchase the SSL cert? What do I need to do?

@anisha I think its fine to keep the domain with @joeb himself. We can create a new account in IPXcore for poddery and then order the SSL certificate. Hope @joeb can pay for it using paypal.

I'll need the credentials to the account so that I can make the payment.

I have not heard from anyone about how to make a payment using the IPXcore account. I'll plan to renew the SSL certificate from GoDaddy tomorrow (it's the easiest option for me to do without changing name server records) unless I hear from someone.

@manukrishnantv @anisha can you create IPXcore account and share with @joeb ?

@joeb I have created an account with IPXCore and have added an SSL Certificate to the cart. Will share the login details by mail.

Thanks @joeb for the payment. I have generated the CSR for the SSL Certificate and is waiting for it to be sent by mail. Will update that in server once I get hold of it.

Updated SSL certificate to the new AlphaSSL from IPXCore. If anyone is experiencing issues, please report. Feels like its something the users must be aware of. So, can someone update there?

@manukrishnantv Stream is mostly silent today, I was wondering if the certificate change has anything to do with it.

ah we are not getting any updates from other pods, but our posts are reaching others (checked in diasp.org)

updated https://poddery.com/posts/878481

@praveenarimbrathod In the production log, there was an error "Peer certificate cannot be authenticated with given CA certificates" I have restarted the pod again and now no log entries with that error are shown. Lets wait a while to confirm its working.

Btw, I tried asking in #diaspora on FreeNode, but no responses yet.

@manukrishnantv http://www.sslshopper.com/ssl-checker.html#hostname=https://poddery.com/ looks like we need to add GlobalSign's Intermediate CA too!

@manukrishnantv lets try and fix other issues suggested here https://sslcheck.globalsign.com/en_US/sslcheck?host=poddery.com#194.103.16.69-ssl once we fix this

Finally the issue with "Peer certificate cannot be authenticated with given CA certificates" is solved. Feels like its an issue with the order of certificates to be placed in the .pem file for nginx. Actually the order is: Site SSL -> Global Sign -> AlphaSSL

@manukrishnantv thanks for hours of hard work!