Cheap SSL Certificates?

mawr

What are the best SSL certificates I can buy for the lowest price? I'm currently looking at $9/yr & $11/yr PositiveSSL and RapidSSL from NameCheap. Is one better than the other?

Thanks!

drazilox

WoSign and Let's Encrypt are free.

mosan7763

wosign, startssl, letsencrypt. free.

miTgiB

https://hostigation.com/?page=SSL $4.99/yr for PositiveSSL

pcfreak30

Letsencrypt. Why pay?

Bochi

For personal use and some business applications: Let's Encrypt
For most business things: RapidSSL, but mainly PositiveSSL (from Namecheap and SSLS.com)

AlbaHost

https://www.ssls.com/lp/3.88-ssl-offer.html

For $3.88/y positivessl.

agentmishra

@drazilox

letsencrypt do not work on nginx natively

also any idea about wildcard ssl provider like wosign

mike0000

agentmishra said: letsencrypt do not work on nginx natively

Huh? It spits out a fullchain.pem and private key, that's all you need for it to work with nginx.

drazilox

@agentmishra said:
drazilox

letsencrypt do not work on nginx natively

also any idea about wildcard ssl provider like wosign

I don't use Let's Encrypt, but I tested it with nginx using simp_le, and got it working pretty easily.

seikan

agentmishra said: letsencrypt do not work on nginx natively

I just setup a LE certificate with Nginx yesterday. No issues and working fine.

neps

mawr said: What are the best SSL certificates I can buy for the lowest price? I'm currently looking at $9/yr & $11/yr PositiveSSL and RapidSSL from NameCheap. Is one better than the other?

Thanks!

With Namecheap, if the domain you're buying for has never used a PositiveSSL cert before, it's cheaper to buy a $0.88 domain + the $1.99 year cert add-on than to buy a cert straight up. Just forget or park the domain and use the cert for whatever you were going to use it for.

agentmishra

@seikan said:
I just setup a LE certificate with Nginx yesterday. No issues and working fine.

how?

seikan

I have no idea why LET blocking me from posting the instructions here.

I posted it to PasteBin.

http://pastebin.com/WwwPVRgm

Let me know if you need anything.

agentmishra

@seikan, how did you support nginx

seikan

Here is my Nginx config:

listen 443;
ssl on;
ssl_certificate /etc/letsencrypt/live/domain.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/domain.com/privkey.pem;

ssl_ciphers 'AES128+EECDH:AES128+EDH:!aNULL';

ssl_protocols TLSv1.1 TLSv1.2;
ssl_session_cache shared:SSL:10m;

ssl_stapling on;
ssl_stapling_verify on;
ssl_trusted_certificate /etc/ssl/ca-certs.pem;

resolver 8.8.4.4 8.8.8.8 valid=300s;
resolver_timeout 10s;

ssl_prefer_server_ciphers on;
ssl_dhparam /etc/ssl/dhparam.pem;

ca-certs.pem is downloaded from http://curl.haxx.se/ca/cacert.pem

dhparam.pem is generated using command:

openssl dhparam -out dhparam.pem 4096

agentmishra

@seikan are you using nginx natively or nginx-admin over apache on cpanel

cos i am worried for the nginx-admin over apache on cpanel

seikan

You are using Nginx as your reverse proxy?

There is no need to forward your traffics in https from Nginx to Apache locally.

I'm only running Nginx on the server.

wwabbit

I've been using this guide to setup nginx + letsencrypt on multiple servers:

https://www.nginx.com/blog/free-certificates-lets-encrypt-and-nginx/

The letsencrypt code has a letsencrypt-nginx but it's still experimental for now, hopefully it will be completed and stable soon.