Mobile app version of vmapp.org
Login or Join
Pope3001725

: Migrating SSL cert to new server We are moving from an OSCommerce website to a Magento website on a different server but with the exact same domain name. The OSCommerce site has a SHA-1 SSL

@Pope3001725

Posted in: #Https #SecurityCertificate

We are moving from an OSCommerce website to a Magento website on a different server but with the exact same domain name.

The OSCommerce site has a SHA-1 SSL cert with goDaddy which I will change to a SHA-2 cert once I Re-Key it. As far as I can see I first need to generate a new CSR from our new server and then Re-Key our SSL cert

1. What is the best process to follow when doing this so that I don't loose the SSL cert on either site/server? Should I wait until we point our domain to our new server?

2. Is it possible to test a https connection on our new Magento site before rekeying the cert?

UPDATE

Thanks for the answers, I'm concerned about not having SSL on the new site imidiatly after launch. Is there anyway I can have it immediately?

Below are the steps I believe I should take to get SSL up on the new site, can these be improved?

1 - Update DNS records to point to new Server.

2 - Generate CERTIFICATE SIGNING REQUEST (CSR) from new Server.

3 - Re-Key SSL Cert which includes uploading new CSR.

4 - Wait for new SSL Cert to be approved. How long is this normally?

5 - Download new SSL cert and place on new server.

6 - Update NGINX configuration, restart NGINX server.

7 - Turn SSL on from Magento Admin Panel.

10.02% popularity Vote Up Vote Down


Login to follow query

More posts by @Pope3001725

2 Comments

Sorted by latest first Latest Oldest Best

 

@Murphy175

As already explained you can run both servers simultaneously as long as you don't revoke the old cert.
You can test the new https by getting both servers set up as in 1. Then modify your hosts file so your computer thinks the website is located at the new server. Don't modify the DNS records so everyone else still gets the original server. When you visit the site, you'll get the new server and be able to develop and test things (including the cert).

10% popularity Vote Up Vote Down


 

@Radia820

In Response to #1 , as long as you don't "revoke" the previous SSL certificate at Godaddy, it will continue to work so long as you don't change any configuration options on the server. If you wait until you point the domain to the new server to submit a new SSL cert request, then you'll likely be without a cert for a period of time while the new cert gets approved.
You won't be able to test the https connection using the new cert on a different server, because it will be tied to the original domain name which will continue to host your old site. You could test the cert if you're going to use the original server by moving the magento site to a subfolder in the root webserver directory, and switching out to the new SSL cert.

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme