SecuritySpy and Let's Encrypt SSL

lishper
lishper
edited April 2016 in SecuritySpy
Is it possible to use Let's Encrypt's SSL certs with SecuritySpy?

I see that the cert name for SecuritySpy needs to be named server.crt, I already have a few services running on the same computer using the default outputs from Let's Encrypt (cert.pem). I'm not terribly familiar with SSL so this may be a dumb question :)

Thanks!

Comments

  • lishper
    lishper
    As a follow-up, I tried converting the cert.pem to a .crt file using the following command:

    openssl x509 -outform der -in your-cert.pem -out your-cert.crt

    I then created an alias of server.crt from the Let's Encrypt directory and pointed it to the SecuritySpy directory. Unfortunately it created the self-signed certificate again.

    I then moved the server.crt directly to the SecuritySpy folder and same problem.
  • Ben
    Ben
    SecuritySpy will be able to use certificates from any valid certificate authority, provided they are in the right format. Please see the HTTP Keys and Certificates section of the SecuritySpy User Manual - Web Server Settings. From the manual:

    When supplying a private key, it must be as follows:

    The file name must be "server.key"
    The format must be PEM or binary DER
    The key must have no password requirement.

    When supplying a certificate, it must be as follows:

    The file name must be "server.crt"
    The format must be PEM or binary DER.

    So you can leave your certificate in its original PEM format, but simply rename it "server.crt". You didn't mention anything about the private key, that needs to be present too, in the format described above.

    Here is a step-by-step guide for purchasing and installing certificates for SecuritySpy: How to purchase and install an SSL certificate for SecuritySpy
  • lishper
    lishper
    Thanks Ben!

    I really should have looked in the manual.

    Once I renamed the cert and key files themselves without trying to play with an alias or converting them, they worked immediately.

    Appreciate the help!
  • Ben
    Ben
    Great to hear that.

Categories