Comodo EV SSL cert on nginx

Kurt Hansen khansen at charityweb.net
Tue Feb 17 02:29:22 MSK 2009


Hi Nick,

Yes, that helps a bunch! :-)

The EV features are working in FF3, but not in IE7 and Safari. Neither 
recognize Comodo as a CA -- I must not have the CA bundle set up right. 
Let me check my setup further.

Take care,

Kurt

Nick Pearson wrote:
> Hi Kurt,
>
> I've not tested a Comodo cert on nginx, but you can test it by editing 
> your /etc/hosts file (or on Windows, 
> c:\WINDOWS\system32\drivers\etc\hosts) to point a domain at a specific 
> IP.  In doing so, your computer will use that IP when you request the 
> domain (bypassing DNS), allowing you to test the certificate.  Just be 
> sure to remember to clear that /etc/hosts entry when you're finished!
>
> Hope that helps.
>
> Nick
>
>
> On Mon, Feb 16, 2009 at 3:48 PM, Kurt Hansen <khansen at charityweb.net 
> <mailto:khansen at charityweb.net>> wrote:
>
>     Hello,
>
>     I'm just starting to evaluate nginx for our use. Looking good so far!
>
>     One of our biggest clients uses an EV SSL cert from Comodo. The EV
>     certs have nice features on FireFox 3 and IE7; the address bar
>     changes color and show the full name making customers more
>     comfortable in making credit card transactions. Or so the theory goes.
>
>     For Comodo, you have to add their certs to the CA bundle and use
>     ssl_certificate_client directive. I believe I've implemented this
>     properly and it appears to be working.
>
>     However, I can't test out the FF3 and IE7 address features because
>     they only work on the live site, so I don't know for certain that
>     they are working.
>
>     Is anybody using Comodo EV SSL certs on nginx? aOr, any EV SSL
>     certs on nginx? If so, can you send me the link so I can see it in
>     FF3 and IE7?
>
>     By the way, Comodo only charges US$359 for EV certs while VeriSign
>     charges ~US$3000. If you are in the market for EV certs, check out
>     Comodo.
>
>     Take care,
>
>     Kurt Hansen
>     CharityWeb
>
>





More information about the nginx mailing list