View Full Version : is it possible to transfer an SSL certificate to a new server?
jvmombay 09-17-2004, 04:06 AM I need a some advice here.
For the last 2 to 3 months I was using reseller accounts. After careful research (especially on finances) I'll need to purchase a dedicated server myself and move all my clients there as well.
1 of my client recently purchased an SSL certificate and I installed it on his account. Will I still be able to transfer that certificate to the server I am going to purchase? and how?
Thanks in advance.
inimino 09-17-2004, 04:36 AM No, your client will need a new certificate.
jvmombay 09-17-2004, 04:39 AM Thanks inimino, that clears everything up then.
Webbase 09-17-2004, 04:40 AM If you had the private key and the cert wouldn't you be able to move it?
Regardless, $5 at Ev1 will solve that problem I guess. :D
jvmombay 09-17-2004, 04:46 AM Ok now that made me confused again.
Yes, I have the private key and the cert itself.
As long as the server is using the same SSL protocols, the cert should be moveable. I've done it with a Thawte and a Geotrust on 2 seperate occasions.
armstrongecom 09-17-2004, 09:30 AM I was able to move one for a client from a win box at one ISP to another ISP's win box. Needed the original cert, the domain registrations needed to be identical, plus the private key.
jvmombay 09-17-2004, 09:42 AM The SSL Cert is StarterSSL
Domain registration hasn't change and won't change since I maintain the domain for my client and I have the private key and even the cert request.
if it is possible how can this be achieved?
blockcipher 09-17-2004, 12:01 PM If you have the cert and private key you can transfer it to another server. Are you using Cpanel by chance? I moved from a reseller to a dedicatd and moved all my certs just fine. I even moved a windows cert to a cpanel box.
If you have all the required files, you shouldn't have a problem.
jvmombay 09-17-2004, 12:13 PM Yes blockcipher I do use cpanel and plan to use cpanel on the dedicated server I am planning to purchase in the next few weeks.
How do you suppose I can transfer these certs from one cpanel to another?
StackHost 09-17-2004, 12:15 PM Yes, you are able to transfer SSL certificates if you have the key and cert. Shouldn't be a problem. I had this same problem a few weeks ago.
blockcipher 09-17-2004, 12:34 PM Originally posted by WebsiteDistrict
Yes blockcipher I do use cpanel and plan to use cpanel on the dedicated server I am planning to purchase in the next few weeks.
How do you suppose I can transfer these certs from one cpanel to another?
You can follow this howto
http://forums.cpanel.net/showthread.php?t=21623
Since you don't have the access to the certs on the server itself, because you are a reseller you can skip down to step 2. Create the files manually and paste the data you have for the key and the crt. Then goto step 4 and complete.
I hope I didn't leave anything out. It has been awhile since I did my move.
Thanks,
AH-Tina 09-17-2004, 12:39 PM Yes, it can be done quite easily.
1. Grab a copy of /usr/share/ssl/private/domainname.key and /usr/share/ssl/certs/domainname.cert and /usr/share/ssh/certs/domainname.cabundle (save them locally somewhere)
2. setup the domain on the new server, etc, give it its own IP, etc
3. Go to the ssl/tls section of whm and click on "Install an SSL Certificate and Setup the Domain"
4. Paste the cert in
5. Then the key
6. Then doublecheck the domain, user, and IP (it may have automatically filled some of those - enter any it missed - if it doesnt supply a cabundle, paste the cabundle too)
7. Click "DO IT"
--Tina
dynamicnet 09-17-2004, 01:10 PM Greetings:
Tina, I'm glad you stepped in; somtimes it is too easy to say "no."
Thank you.
AH-Tina 09-17-2004, 01:15 PM My staff sometimes gets frustrated with me because I refuse to accept "It can't be done." as an answer.
--Tina
blockcipher 09-17-2004, 01:33 PM Originally posted by dynamicnet
Greetings:
Tina, I'm glad you stepped in; somtimes it is too easy to say "no."
Thank you.
I never said no. I tried helping with the problem as well :D
jvmombay 09-17-2004, 06:18 PM thanks blockcipher and tina.
I agree with dynamicnet, it's sometimes more easier to say no which I almost accepted when i saw this issue.
Anyway thanks again guys
Regards
inimino 09-17-2004, 06:21 PM Well I said "no" but I think I misunderstood :)
blockcipher 09-17-2004, 07:20 PM Anytime WebsiteDistrict. Hope that migration goes smooth for you :)
jvmombay 09-17-2004, 07:26 PM yeah, i hope so. I just wasn't able to anticipate this kind of migration at such an early stage.
|