Re: Digital Certificate Manager renew GoDaddy Cert -- WEB400

Ya, I probably would have just used the same one years ago, but with how
fast things change with SSL/TLS a year is a lifetime for a CSR to me at
least. :)

Google just announced dropping support for a certain CA now too. I can't
remember which one, I just know I am not using them.

On Tue, Jul 2, 2024 at 11:24 AM Jon Paris <jon.paris@xxxxxxxxxxxxxx> wrote:

Brad,

I was _advised_ to create a new CSR every year for security reasons but
told it was not essential as the old CSR would still be valid.

I chose to create a new one.

Jon P.

On Jul 1, 2024, at 5:57 PM, Brad Stone <bvstone@xxxxxxxxx> wrote:

Ah.. if it's a 5 year one then maybe. I know 3-4 years ago, though,
Namecheap said they can still sell 5 year certs, but you still need a new
CSR every year.

On Mon, Jul 1, 2024 at 3:59 PM <joe.holt@xxxxxxxxxxx> wrote:

It surprised me as well. GoDaddy tells you it renewed. You login and
download the new cert file and import it. I do think there is like a 5
year limit on the original CSR but I'm pulling this from old memory.

***
Joe W Holt
Sr Programmer/Engineer
Jack Onofrio Dog Shows, LLC
405.427.8181

From: "Brad Stone" <bvstone@xxxxxxxxx>
To: "Web Enabling the IBM i (AS/400 and iSeries)"
<web400@xxxxxxxxxxxxxxxxxx>
Date: 07/01/2024 03:53 PM
Subject: Re: [WEB400] Digital Certificate Manager renew GoDaddy

Cert

Sent by: "WEB400" <web400-bounces@xxxxxxxxxxxxxxxxxx>

I've never gotten a cert without a CSR.. Maybe Godaddy is different. I

use

NameCheap.

On Mon, Jul 1, 2024 at 3:49 PM <joe.holt@xxxxxxxxxxx> wrote:

I've renewed the same cert without creating a new CSR for the last 2

years

at least in DCM. You just import the cert as you did the original and

it

should work.

***
Joe W Holt
Sr Programmer/Engineer
Jack Onofrio Dog Shows, LLC
405.427.8181

From: "Brad Stone" <bvstone@xxxxxxxxx>
To: "Web Enabling the IBM i (AS/400 and iSeries)"
<web400@xxxxxxxxxxxxxxxxxx>
Date: 07/01/2024 03:37 PM
Subject: Re: [WEB400] Digital Certificate Manager renew GoDaddy

Cert

Sent by: "WEB400" <web400-bounces@xxxxxxxxxxxxxxxxxx>

To renew, you usually do this:

1. In DCM, click renew certificate.
2. DCM generates a CSR
3. You go to the issuer of your cert and renew it, giving them the CSR
that DCM created.
4. Do some validation of ownership of the domain/property.
5. Get the cert from the issuer.
6. Import the cert into DCM.
7. Update any configs/app applications.
8. Restart server(s).

On Mon, Jul 1, 2024 at 1:09 PM Art Tostaine, Jr. <atostaine@xxxxxxxxx>
wrote:

Using systemname:2006/dcm. GoDaddy sent us an email that our

certificate

was renewed. I downloaded 2 CRT files and a PEM.

I thought it would be as easy as finding the certificate and click

renew

and upload a new file. What is the process? When I click renew on the

cert,

it asks if its local or Internet. When I click Internet I'm setting up

a

whole new CA?

Any help/links would be appreciated. I finally found some IBM docs but

it's

for the old CM.

https://www.ibm.com/support/pages/renewing-third-party-ssl-certificate-digital-certificate-manager-dcm

Thanks, Art
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)

mailing

list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)

mailing

list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)

mailing

list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing

list

To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.