Re: Digital Certificate Manager renew GoDaddy Cert

Jon Paris <[email protected]> Tue, 2 Jul 2024 12:24:22 -0400
Newsgroups gmane.comp.systems.as400.web
Message-ID <[email protected]>
Brad,

I was _advised_ to create a new CSR every year for security reasons but told it was not essential as the old CSR would still be valid.

I chose to create a new one.


Jon P.

> On Jul 1, 2024, at 5:57 PM, Brad Stone <[email protected]> wrote:
> 
> Ah.. if it's a 5 year one then maybe.  I know 3-4 years ago, though,
> Namecheap said they can still sell 5 year certs, but you still need a new
> CSR every year.
> 
> On Mon, Jul 1, 2024 at 3:59 PM <[email protected]> wrote:
> 
>> 
>> 
>> It surprised me as well.  GoDaddy tells you it renewed. You login and
>> download the new cert file and import it.  I do think there is like a 5
>> year limit on the original CSR but I'm pulling this from old memory.
>> 
>> ***
>> Joe W Holt
>> Sr Programmer/Engineer
>> Jack Onofrio Dog Shows, LLC
>> 405.427.8181
>> 
>> 
>> 
>> From:   "Brad Stone" <[email protected]>
>> To:     "Web Enabling the IBM i (AS/400 and iSeries)"
>>            <[email protected]>
>> Date:   07/01/2024 03:53 PM
>> Subject:        Re: [WEB400] Digital Certificate Manager renew GoDaddy Cert
>> Sent by:        "WEB400" <[email protected]>
>> 
>> 
>> 
>> I've never gotten a cert without a CSR.. Maybe Godaddy is different.  I use
>> NameCheap.
>> 
>> On Mon, Jul 1, 2024 at 3:49 PM <[email protected]> wrote:
>> 
>>> 
>>> 
>>> I've renewed the same cert without creating a new CSR for the last 2
>> years
>>> at least in DCM.  You just import the cert as you did the original and it
>>> should work.
>>> 
>>> ***
>>> Joe W Holt
>>> Sr Programmer/Engineer
>>> Jack Onofrio Dog Shows, LLC
>>> 405.427.8181
>>> 
>>> 
>>> 
>>> From:   "Brad Stone" <[email protected]>
>>> To:     "Web Enabling the IBM i (AS/400 and iSeries)"
>>>            <[email protected]>
>>> Date:   07/01/2024 03:37 PM
>>> Subject:        Re: [WEB400] Digital Certificate Manager renew GoDaddy
>> Cert
>>> Sent by:        "WEB400" <[email protected]>
>>> 
>>> 
>>> 
>>> To renew, you usually do this:
>>> 
>>> 1.  In DCM, click renew certificate.
>>> 2.  DCM generates a CSR
>>> 3.  You go to the issuer of your cert and renew it, giving them the CSR
>>> that DCM created.
>>> 4.  Do some validation of ownership of the domain/property.
>>> 5.  Get the cert from the issuer.
>>> 6.  Import the cert into DCM.
>>> 7.  Update any configs/app applications.
>>> 8.   Restart server(s).
>>> 
>>> 
>>> 
>>> On Mon, Jul 1, 2024 at 1:09 PM Art Tostaine, Jr. <[email protected]>
>>> wrote:
>>> 
>>>> Using systemname:2006/dcm. GoDaddy sent us an email that our
>> certificate
>>>> was renewed. I downloaded 2 CRT files and a PEM.
>>>> 
>>>> I thought it would be as easy as finding the certificate and click
>> renew
>>>> and upload a new file. What is the process? When I click renew on the
>>> cert,
>>>> it asks if its local or Internet. When I click Internet I'm setting up
>> a
>>>> whole new CA?
>>>> 
>>>> Any help/links would be appreciated. I finally found some IBM docs but
>>> it's
>>>> for the old CM.
>>>> 
>>>> 
>>>> 
>>> 
>>> 
>> 
>> https://www.ibm.com/support/pages/renewing-third-party-ssl-certificate-digital-certificate-manager-dcm
>> 
>>> 
>>>> Thanks, Art
>>>> --
>>>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
>> mailing
>>>> list
>>>> To post a message email: [email protected]
>>>> To subscribe, unsubscribe, or change list options,
>>>> visit: https://lists.midrange.com/mailman/listinfo/web400
>>>> or email: [email protected]
>>>> Before posting, please take a moment to review the archives
>>>> at https://archive.midrange.com/web400.
>>>> 
>>>> 
>>> --
>>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
>>> list
>>> To post a message email: [email protected]
>>> To subscribe, unsubscribe, or change list options,
>>> visit: https://lists.midrange.com/mailman/listinfo/web400
>>> or email: [email protected]
>>> Before posting, please take a moment to review the archives
>>> at https://archive.midrange.com/web400.
>>> 
>>> 
>>> --
>>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
>>> list
>>> To post a message email: [email protected]
>>> To subscribe, unsubscribe, or change list options,
>>> visit: https://lists.midrange.com/mailman/listinfo/web400
>>> or email: [email protected]
>>> Before posting, please take a moment to review the archives
>>> at https://archive.midrange.com/web400.
>>> 
>>> 
>> --
>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
>> list
>> To post a message email: [email protected]
>> To subscribe, unsubscribe, or change list options,
>> visit: https://lists.midrange.com/mailman/listinfo/web400
>> or email: [email protected]
>> Before posting, please take a moment to review the archives
>> at https://archive.midrange.com/web400.
>> 
>> 
>> --
>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
>> list
>> To post a message email: [email protected]
>> To subscribe, unsubscribe, or change list options,
>> visit: https://lists.midrange.com/mailman/listinfo/web400
>> or email: [email protected]
>> Before posting, please take a moment to review the archives
>> at https://archive.midrange.com/web400.
>> 
>> 
> -- 
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
> To post a message email: [email protected]
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: [email protected]
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/web400.
> 

-- 
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.