Re: Digital Certificate Manager renew GoDaddy Cert

would the fact that our power i ssl cert from Go Daddy is for a sub-domain,
and other Win ssl certs are for the domain and expire on a different
schedule matter? Every year i have had to generate a new CSR as the DCM
will not accept the first cert retrieved by the network team (or do they
have to use prev year CSR)?

Jim Franz

On Tue, Jul 2, 2024 at 3:41 PM Brad Stone <[email protected]> wrote:

> Or Entrust was one of your CAs.  :) Getting dropped by Chrome/Google.
>
> On Tue, Jul 2, 2024 at 2:34 PM Pete Helgren <[email protected]> wrote:
>
> > The only reason to change is if you want to change the algorithm
> > parameters, or an algorithm is no longer supported, or your certificate
> > changes in some way (new SAN maybe). I have been using the same CSR's
> > for years, primarily because it saves a step when generating those
> > LetsEncrypt certs every 90 days....
> >
> > Pete Helgren
> > www.petesworkshop.com
> > GIAC Secure Software Programmer-Java
> > GIAC Cloud Penetration Tester
> > AWS Certified Cloud Practitioner
> > Microsoft Certified: Azure Fundamentals
> >
> > On 7/2/2024 10:24 AM, Jon Paris wrote:
> > > Brad,
> > >
> > > I was _advised_ to create a new CSR every year for security reasons but
> > told it was not essential as the old CSR would still be valid.
> > >
> > > I chose to create a new one.
> > >
> > >
> > > Jon P.
> > >
> > >> On Jul 1, 2024, at 5:57 PM, Brad Stone <[email protected]> wrote:
> > >>
> > >> Ah.. if it's a 5 year one then maybe.  I know 3-4 years ago, though,
> > >> Namecheap said they can still sell 5 year certs, but you still need a
> > new
> > >> CSR every year.
> > >>
> > >> On Mon, Jul 1, 2024 at 3:59 PM <[email protected]> wrote:
> > >>
> > >>>
> > >>> It surprised me as well.  GoDaddy tells you it renewed. You login and
> > >>> download the new cert file and import it.  I do think there is like
> a 5
> > >>> year limit on the original CSR but I'm pulling this from old memory.
> > >>>
> > >>> ***
> > >>> Joe W Holt
> > >>> Sr Programmer/Engineer
> > >>> Jack Onofrio Dog Shows, LLC
> > >>> 405.427.8181
> > >>>
> > >>>
> > >>>
> > >>> From:   "Brad Stone" <[email protected]>
> > >>> To:     "Web Enabling the IBM i (AS/400 and iSeries)"
> > >>>             <[email protected]>
> > >>> Date:   07/01/2024 03:53 PM
> > >>> Subject:        Re: [WEB400] Digital Certificate Manager renew
> GoDaddy
> > Cert
> > >>> Sent by:        "WEB400" <[email protected]>
> > >>>
> > >>>
> > >>>
> > >>> I've never gotten a cert without a CSR.. Maybe Godaddy is different.
> > I use
> > >>> NameCheap.
> > >>>
> > >>> On Mon, Jul 1, 2024 at 3:49 PM <[email protected]> wrote:
> > >>>
> > >>>>
> > >>>> I've renewed the same cert without creating a new CSR for the last 2
> > >>> years
> > >>>> at least in DCM.  You just import the cert as you did the original
> > and it
> > >>>> should work.
> > >>>>
> > >>>> ***
> > >>>> Joe W Holt
> > >>>> Sr Programmer/Engineer
> > >>>> Jack Onofrio Dog Shows, LLC
> > >>>> 405.427.8181
> > >>>>
> > >>>>
> > >>>>
> > >>>> From:   "Brad Stone" <[email protected]>
> > >>>> To:     "Web Enabling the IBM i (AS/400 and iSeries)"
> > >>>>             <[email protected]>
> > >>>> Date:   07/01/2024 03:37 PM
> > >>>> Subject:        Re: [WEB400] Digital Certificate Manager renew
> GoDaddy
> > >>> Cert
> > >>>> Sent by:        "WEB400" <[email protected]>
> > >>>>
> > >>>>
> > >>>>
> > >>>> To renew, you usually do this:
> > >>>>
> > >>>> 1.  In DCM, click renew certificate.
> > >>>> 2.  DCM generates a CSR
> > >>>> 3.  You go to the issuer of your cert and renew it, giving them the
> > CSR
> > >>>> that DCM created.
> > >>>> 4.  Do some validation of ownership of the domain/property.
> > >>>> 5.  Get the cert from the issuer.
> > >>>> 6.  Import the cert into DCM.
> > >>>> 7.  Update any configs/app applications.
> > >>>> 8.   Restart server(s).
> > >>>>
> > >>>>
> > >>>>
> > >>>> On Mon, Jul 1, 2024 at 1:09 PM Art Tostaine, Jr. <
> [email protected]
> > >
> > >>>> wrote:
> > >>>>
> > >>>>> Using systemname:2006/dcm. GoDaddy sent us an email that our
> > >>> certificate
> > >>>>> was renewed. I downloaded 2 CRT files and a PEM.
> > >>>>>
> > >>>>> I thought it would be as easy as finding the certificate and click
> > >>> renew
> > >>>>> and upload a new file. What is the process? When I click renew on
> the
> > >>>> cert,
> > >>>>> it asks if its local or Internet. When I click Internet I'm setting
> > up
> > >>> a
> > >>>>> whole new CA?
> > >>>>>
> > >>>>> Any help/links would be appreciated. I finally found some IBM docs
> > but
> > >>>> it's
> > >>>>> for the old CM.
> > >>>>>
> > >>>>>
> > >>>>>
> > >>>>
> > >>>
> >
> https://www.ibm.com/support/pages/renewing-third-party-ssl-certificate-digital-certificate-manager-dcm
> > >>>
> > >>>>> Thanks, Art
> > >>>>> --
> > >>>>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> > >>> mailing
> > >>>>> list
> > >>>>> To post a message email: [email protected]
> > >>>>> To subscribe, unsubscribe, or change list options,
> > >>>>> visit: https://lists.midrange.com/mailman/listinfo/web400
> > >>>>> or email: [email protected]
> > >>>>> Before posting, please take a moment to review the archives
> > >>>>> at https://archive.midrange.com/web400.
> > >>>>>
> > >>>>>
> > >>>> --
> > >>>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> > mailing
> > >>>> list
> > >>>> To post a message email: [email protected]
> > >>>> To subscribe, unsubscribe, or change list options,
> > >>>> visit: https://lists.midrange.com/mailman/listinfo/web400
> > >>>> or email: [email protected]
> > >>>> Before posting, please take a moment to review the archives
> > >>>> at https://archive.midrange.com/web400.
> > >>>>
> > >>>>
> > >>>> --
> > >>>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> > mailing
> > >>>> list
> > >>>> To post a message email: [email protected]
> > >>>> To subscribe, unsubscribe, or change list options,
> > >>>> visit: https://lists.midrange.com/mailman/listinfo/web400
> > >>>> or email: [email protected]
> > >>>> Before posting, please take a moment to review the archives
> > >>>> at https://archive.midrange.com/web400.
> > >>>>
> > >>>>
> > >>> --
> > >>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> > mailing
> > >>> list
> > >>> To post a message email: [email protected]
> > >>> To subscribe, unsubscribe, or change list options,
> > >>> visit: https://lists.midrange.com/mailman/listinfo/web400
> > >>> or email: [email protected]
> > >>> Before posting, please take a moment to review the archives
> > >>> at https://archive.midrange.com/web400.
> > >>>
> > >>>
> > >>> --
> > >>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> > mailing
> > >>> list
> > >>> To post a message email: [email protected]
> > >>> To subscribe, unsubscribe, or change list options,
> > >>> visit: https://lists.midrange.com/mailman/listinfo/web400
> > >>> or email: [email protected]
> > >>> Before posting, please take a moment to review the archives
> > >>> at https://archive.midrange.com/web400.
> > >>>
> > >>>
> > >> --
> > >> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> > mailing list
> > >> To post a message email: [email protected]
> > >> To subscribe, unsubscribe, or change list options,
> > >> visit: https://lists.midrange.com/mailman/listinfo/web400
> > >> or email: [email protected]
> > >> Before posting, please take a moment to review the archives
> > >> at https://archive.midrange.com/web400.
> > >>
> > --
> > This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> > list
> > To post a message email: [email protected]
> > To subscribe, unsubscribe, or change list options,
> > visit: https://lists.midrange.com/mailman/listinfo/web400
> > or email: [email protected]
> > Before posting, please take a moment to review the archives
> > at https://archive.midrange.com/web400.
> >
> >
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: [email protected]
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: [email protected]
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/web400.
>
>
-- 
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.