Anybody know about SSL Certificates?

[daverave999]

It appears I need SSL on my new online shop for Google Checkout or the PayPal API to work. I can turn on SSL in my shop but there is a mismatch between my domain name and the server address. I assume a certificate will sort this?

Do I need to get this from the people who provide my hosting or will anyone do? Does it need the server to be on a fixed IP?

[celsis]

Dave,

I used to use Verisign.

http://www.verisign.co.uk/ssl/ssl-information-center/index.html?sl=t73440167560000018

They're a good bet.

[Soft Top]

It's a while since I've done anything certificate wise but as Celsis says you can cetainly get them from any of the suppliers of certificates.

I am pretty sure the IP of the server is irrelevant and it was more about proving you are who you say you are. If you go through the process on the Verisign site you'll find out and you don't have to click the finish button if it doesn't seem right.

A quick call to the web designers and/or Verisign should see you right though.

[mb55317]

Hi Dave,

I purchase SSL certificates via Thawte. You may want to consider them.

For sure you will need SSL for online payments, otherwise any sensitive information will be sent over the Internet in the clear i.e. not encrypted.

The 'Common Name (CN)' must match the domain name of the site. This may be the reason you are getting the error. Take a look at the following link, it may help: https://search.thawte.com/support/ss...tent&id=AR1108

Your hosting provider might be able to sort the SSL certificate for you but I guess that would depend on the type of service you have signed up to.

Rgds, MB

[daverave999]

Thanks folks-I've got some deciding to do first as I'm intending to be using two domains and only want to pay for one certificate if I can help it. Probably going to just redirect unbelievablesaw.co.uk to the product page on fistload.co.uk and have the certificate for the latter. I suppose it depends on how lucrative the saws will be...

[gt3911]

Thanks folks-I've got some deciding to do first as I'm intending to be using two domains and only want to pay for one certificate if I can help it. Probably going to just redirect unbelievablesaw.co.uk to the product page on fistload.co.uk and have the certificate for the latter. I suppose it depends on how lucrative the saws will be...

If you don't want to do all the SSL on your side you can have your payment processed via someone like [EDITED], they have a free basic checkout tool, and you don't need a [EDITED] account to send the payment, it accepts the typical range of cards.

A quick example if you view this page here

It can be a bit a bit tricky if you have a limited experience in this field and you want to access more advanced features.

Just thought it was an option you might not have considered.

[daverave999]

Thanks, I've got something a bit like that at the moment-the website just transfers to the Paypal website to complete the transaction, but as you say, you get more advanced features if you use the API. I'll need it for google checkout too...

[daverave999]

I managed to find a temporary workaround if anyone is interested, similar to what gt3911 posted, but crappier.
All the product info is on the page but clicking Buy Now transfers the customer to Google Checkout, so it's all done securely there, with no personal info taken on my site.

If anyone is interested, take a look at http://fistload.co.uk/blog/2010/08/2...saws-for-sale/
Any comments (or orders ) welcome!