Web Hosting Talk







View Full Version : is it possible to transfer an SSL certificate to a new server?


jvmombay
09-17-2004, 04:06 AM
I need a some advice here.

For the last 2 to 3 months I was using reseller accounts. After careful research (especially on finances) I'll need to purchase a dedicated server myself and move all my clients there as well.

1 of my client recently purchased an SSL certificate and I installed it on his account. Will I still be able to transfer that certificate to the server I am going to purchase? and how?

Thanks in advance.

inimino
09-17-2004, 04:36 AM
No, your client will need a new certificate.

jvmombay
09-17-2004, 04:39 AM
Thanks inimino, that clears everything up then.

Webbase
09-17-2004, 04:40 AM
If you had the private key and the cert wouldn't you be able to move it?

Regardless, $5 at Ev1 will solve that problem I guess. :D

jvmombay
09-17-2004, 04:46 AM
Ok now that made me confused again.

Yes, I have the private key and the cert itself.

bear
09-17-2004, 06:38 AM
As long as the server is using the same SSL protocols, the cert should be moveable. I've done it with a Thawte and a Geotrust on 2 seperate occasions.

armstrongecom
09-17-2004, 09:30 AM
I was able to move one for a client from a win box at one ISP to another ISP's win box. Needed the original cert, the domain registrations needed to be identical, plus the private key.

jvmombay
09-17-2004, 09:42 AM
The SSL Cert is StarterSSL

Domain registration hasn't change and won't change since I maintain the domain for my client and I have the private key and even the cert request.

if it is possible how can this be achieved?

blockcipher
09-17-2004, 12:01 PM
If you have the cert and private key you can transfer it to another server. Are you using Cpanel by chance? I moved from a reseller to a dedicatd and moved all my certs just fine. I even moved a windows cert to a cpanel box.

If you have all the required files, you shouldn't have a problem.

jvmombay
09-17-2004, 12:13 PM
Yes blockcipher I do use cpanel and plan to use cpanel on the dedicated server I am planning to purchase in the next few weeks.

How do you suppose I can transfer these certs from one cpanel to another?

StackHost
09-17-2004, 12:15 PM
Yes, you are able to transfer SSL certificates if you have the key and cert. Shouldn't be a problem. I had this same problem a few weeks ago.

blockcipher
09-17-2004, 12:34 PM
Originally posted by WebsiteDistrict
Yes blockcipher I do use cpanel and plan to use cpanel on the dedicated server I am planning to purchase in the next few weeks.

How do you suppose I can transfer these certs from one cpanel to another?

You can follow this howto

http://forums.cpanel.net/showthread.php?t=21623

Since you don't have the access to the certs on the server itself, because you are a reseller you can skip down to step 2. Create the files manually and paste the data you have for the key and the crt. Then goto step 4 and complete.

I hope I didn't leave anything out. It has been awhile since I did my move.

Thanks,

AH-Tina
09-17-2004, 12:39 PM
Yes, it can be done quite easily.

1. Grab a copy of /usr/share/ssl/private/domainname.key and /usr/share/ssl/certs/domainname.cert and /usr/share/ssh/certs/domainname.cabundle (save them locally somewhere)

2. setup the domain on the new server, etc, give it its own IP, etc

3. Go to the ssl/tls section of whm and click on "Install an SSL Certificate and Setup the Domain"

4. Paste the cert in

5. Then the key

6. Then doublecheck the domain, user, and IP (it may have automatically filled some of those - enter any it missed - if it doesnt supply a cabundle, paste the cabundle too)

7. Click "DO IT"

--Tina

dynamicnet
09-17-2004, 01:10 PM
Greetings:

Tina, I'm glad you stepped in; somtimes it is too easy to say "no."

Thank you.

AH-Tina
09-17-2004, 01:15 PM
My staff sometimes gets frustrated with me because I refuse to accept "It can't be done." as an answer.

--Tina

blockcipher
09-17-2004, 01:33 PM
Originally posted by dynamicnet
Greetings:

Tina, I'm glad you stepped in; somtimes it is too easy to say "no."

Thank you.

I never said no. I tried helping with the problem as well :D

jvmombay
09-17-2004, 06:18 PM
thanks blockcipher and tina.

I agree with dynamicnet, it's sometimes more easier to say no which I almost accepted when i saw this issue.

Anyway thanks again guys

Regards

inimino
09-17-2004, 06:21 PM
Well I said "no" but I think I misunderstood :)

blockcipher
09-17-2004, 07:20 PM
Anytime WebsiteDistrict. Hope that migration goes smooth for you :)

jvmombay
09-17-2004, 07:26 PM
yeah, i hope so. I just wasn't able to anticipate this kind of migration at such an early stage.