Re: Digital Certificate Manager renew GoDaddy Cert

Or Entrust was one of your CAs.  :) Getting dropped by Chrome/Google.

On Tue, Jul 2, 2024 at 2:34 PM Pete Helgren <[email protected]> wrote:

> The only reason to change is if you want to change the algorithm
> parameters, or an algorithm is no longer supported, or your certificate
> changes in some way (new SAN maybe). I have been using the same CSR's
> for years, primarily because it saves a step when generating those
> LetsEncrypt certs every 90 days....
>
> Pete Helgren
> www.petesworkshop.com
> GIAC Secure Software Programmer-Java
> GIAC Cloud Penetration Tester
> AWS Certified Cloud Practitioner
> Microsoft Certified: Azure Fundamentals
>
> On 7/2/2024 10:24 AM, Jon Paris wrote:
> > Brad,
> >
> > I was _advised_ to create a new CSR every year for security reasons but
> told it was not essential as the old CSR would still be valid.
> >
> > I chose to create a new one.
> >
> >
> > Jon P.
> >
> >> On Jul 1, 2024, at 5:57 PM, Brad Stone <[email protected]> wrote:
> >>
> >> Ah.. if it's a 5 year one then maybe.  I know 3-4 years ago, though,
> >> Namecheap said they can still sell 5 year certs, but you still need a
> new
> >> CSR every year.
> >>
> >> On Mon, Jul 1, 2024 at 3:59 PM <[email protected]> wrote:
> >>
> >>>
> >>> It surprised me as well.  GoDaddy tells you it renewed. You login and
> >>> download the new cert file and import it.  I do think there is like a 5
> >>> year limit on the original CSR but I'm pulling this from old memory.
> >>>
> >>> ***
> >>> Joe W Holt
> >>> Sr Programmer/Engineer
> >>> Jack Onofrio Dog Shows, LLC
> >>> 405.427.8181
> >>>
> >>>
> >>>
> >>> From:   "Brad Stone" <[email protected]>
> >>> To:     "Web Enabling the IBM i (AS/400 and iSeries)"
> >>>             <[email protected]>
> >>> Date:   07/01/2024 03:53 PM
> >>> Subject:        Re: [WEB400] Digital Certificate Manager renew GoDaddy
> Cert
> >>> Sent by:        "WEB400" <[email protected]>
> >>>
> >>>
> >>>
> >>> I've never gotten a cert without a CSR.. Maybe Godaddy is different.
> I use
> >>> NameCheap.
> >>>
> >>> On Mon, Jul 1, 2024 at 3:49 PM <[email protected]> wrote:
> >>>
> >>>>
> >>>> I've renewed the same cert without creating a new CSR for the last 2
> >>> years
> >>>> at least in DCM.  You just import the cert as you did the original
> and it
> >>>> should work.
> >>>>
> >>>> ***
> >>>> Joe W Holt
> >>>> Sr Programmer/Engineer
> >>>> Jack Onofrio Dog Shows, LLC
> >>>> 405.427.8181
> >>>>
> >>>>
> >>>>
> >>>> From:   "Brad Stone" <[email protected]>
> >>>> To:     "Web Enabling the IBM i (AS/400 and iSeries)"
> >>>>             <[email protected]>
> >>>> Date:   07/01/2024 03:37 PM
> >>>> Subject:        Re: [WEB400] Digital Certificate Manager renew GoDaddy
> >>> Cert
> >>>> Sent by:        "WEB400" <[email protected]>
> >>>>
> >>>>
> >>>>
> >>>> To renew, you usually do this:
> >>>>
> >>>> 1.  In DCM, click renew certificate.
> >>>> 2.  DCM generates a CSR
> >>>> 3.  You go to the issuer of your cert and renew it, giving them the
> CSR
> >>>> that DCM created.
> >>>> 4.  Do some validation of ownership of the domain/property.
> >>>> 5.  Get the cert from the issuer.
> >>>> 6.  Import the cert into DCM.
> >>>> 7.  Update any configs/app applications.
> >>>> 8.   Restart server(s).
> >>>>
> >>>>
> >>>>
> >>>> On Mon, Jul 1, 2024 at 1:09 PM Art Tostaine, Jr. <[email protected]
> >
> >>>> wrote:
> >>>>
> >>>>> Using systemname:2006/dcm. GoDaddy sent us an email that our
> >>> certificate
> >>>>> was renewed. I downloaded 2 CRT files and a PEM.
> >>>>>
> >>>>> I thought it would be as easy as finding the certificate and click
> >>> renew
> >>>>> and upload a new file. What is the process? When I click renew on the
> >>>> cert,
> >>>>> it asks if its local or Internet. When I click Internet I'm setting
> up
> >>> a
> >>>>> whole new CA?
> >>>>>
> >>>>> Any help/links would be appreciated. I finally found some IBM docs
> but
> >>>> it's
> >>>>> for the old CM.
> >>>>>
> >>>>>
> >>>>>
> >>>>
> >>>
> https://www.ibm.com/support/pages/renewing-third-party-ssl-certificate-digital-certificate-manager-dcm
> >>>
> >>>>> Thanks, Art
> >>>>> --
> >>>>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> >>> mailing
> >>>>> list
> >>>>> To post a message email: [email protected]
> >>>>> To subscribe, unsubscribe, or change list options,
> >>>>> visit: https://lists.midrange.com/mailman/listinfo/web400
> >>>>> or email: [email protected]
> >>>>> Before posting, please take a moment to review the archives
> >>>>> at https://archive.midrange.com/web400.
> >>>>>
> >>>>>
> >>>> --
> >>>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> mailing
> >>>> list
> >>>> To post a message email: [email protected]
> >>>> To subscribe, unsubscribe, or change list options,
> >>>> visit: https://lists.midrange.com/mailman/listinfo/web400
> >>>> or email: [email protected]
> >>>> Before posting, please take a moment to review the archives
> >>>> at https://archive.midrange.com/web400.
> >>>>
> >>>>
> >>>> --
> >>>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> mailing
> >>>> list
> >>>> To post a message email: [email protected]
> >>>> To subscribe, unsubscribe, or change list options,
> >>>> visit: https://lists.midrange.com/mailman/listinfo/web400
> >>>> or email: [email protected]
> >>>> Before posting, please take a moment to review the archives
> >>>> at https://archive.midrange.com/web400.
> >>>>
> >>>>
> >>> --
> >>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> mailing
> >>> list
> >>> To post a message email: [email protected]
> >>> To subscribe, unsubscribe, or change list options,
> >>> visit: https://lists.midrange.com/mailman/listinfo/web400
> >>> or email: [email protected]
> >>> Before posting, please take a moment to review the archives
> >>> at https://archive.midrange.com/web400.
> >>>
> >>>
> >>> --
> >>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> mailing
> >>> list
> >>> To post a message email: [email protected]
> >>> To subscribe, unsubscribe, or change list options,
> >>> visit: https://lists.midrange.com/mailman/listinfo/web400
> >>> or email: [email protected]
> >>> Before posting, please take a moment to review the archives
> >>> at https://archive.midrange.com/web400.
> >>>
> >>>
> >> --
> >> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> mailing list
> >> To post a message email: [email protected]
> >> To subscribe, unsubscribe, or change list options,
> >> visit: https://lists.midrange.com/mailman/listinfo/web400
> >> or email: [email protected]
> >> Before posting, please take a moment to review the archives
> >> at https://archive.midrange.com/web400.
> >>
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: [email protected]
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: [email protected]
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/web400.
>
>
-- 
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.