Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

StartSSL (http://www.startssl.com/?app=1) provides free certificates that are browser-recognised.


Thanks for the link, I didn't know them. I just tried it. I generated a certificate for a site of mine, uploaded it, changed the config and the cert was pulled by Firefox. However sadly, the authority of StartSSL was NOT recognized by Firefox. This is what it said in the egregious warning dialog:

  *-------.com uses an invalid security certificate.

  The certificate is not trusted because no issuer chain was provided.

  (Error code: sec_error_unknown_issuer)*
StartSSL does not work for me. Unless I did something wrong, which happens from time to time. I verified that the StartSSL cert I installed was downloaded by FF, it just doesn't recognize StartCom as a trusted cert authority (apparently). Can anyone confirm this?

Edit2: You guys were right, thanks! I did paste the intermediate certificate into the wrong file, my bad! It works!


Off the top of my head, you probably didn't include the intermediate certificate. Read #31 on the faq: "Why does Firefox present a warning when connecting to my website?"

http://www.startssl.com/?app=25


If you're using nginx, check out [1] for instructions on how to get it working.

[1]: http://blog.dembowski.net/2010/02/25/startssl-and-nginx/


I've been using StartSSL for quite some time, and only wget has been unwilling to accept it (whereas curl, firefox and chrome have all accepted it):

ERROR: cannot verify [site]'s certificate, issued by `/C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Class 1 Primary Intermediate Server CA':

  Self-signed certificate encountered.
To connect to [site] insecurely, use `--no-check-certificate'.


Or you could download their certificate locally...




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: