Re: Digital Certificate Manager renew GoDaddy Cert

would the fact that our power i ssl cert from Go Daddy is for a sub-domain,
and other Win ssl certs are for the domain and expire on a different
schedule matter? Every year i have had to generate a new CSR as the DCM
will not accept the first cert retrieved by the network team (or do they
have to use prev year CSR)?

Jim Franz

On Tue, Jul 2, 2024 at 3:41 PM Brad Stone <bvstone@xxxxxxxxx> wrote:

Or Entrust was one of your CAs. :) Getting dropped by Chrome/Google.

On Tue, Jul 2, 2024 at 2:34 PM Pete Helgren <pete@xxxxxxxxxx> wrote:

The only reason to change is if you want to change the algorithm
parameters, or an algorithm is no longer supported, or your certificate
changes in some way (new SAN maybe). I have been using the same CSR's
for years, primarily because it saves a step when generating those
LetsEncrypt certs every 90 days....

Pete Helgren
www.petesworkshop.com
GIAC Secure Software Programmer-Java
GIAC Cloud Penetration Tester
AWS Certified Cloud Practitioner
Microsoft Certified: Azure Fundamentals

On 7/2/2024 10:24 AM, Jon Paris wrote:

Brad,

I was _advised_ to create a new CSR every year for security reasons

but

told it was not essential as the old CSR would still be valid.

I chose to create a new one.


Jon P.

On Jul 1, 2024, at 5:57 PM, Brad Stone <bvstone@xxxxxxxxx> wrote:

Ah.. if it's a 5 year one then maybe. I know 3-4 years ago, though,
Namecheap said they can still sell 5 year certs, but you still need

a

new

CSR every year.

On Mon, Jul 1, 2024 at 3:59 PM <joe.holt@xxxxxxxxxxx> wrote:

It surprised me as well. GoDaddy tells you it renewed. You login

and

download the new cert file and import it. I do think there is like

a 5

year limit on the original CSR but I'm pulling this from old

memory.

***
Joe W Holt
Sr Programmer/Engineer
Jack Onofrio Dog Shows, LLC
405.427.8181



From: "Brad Stone" <bvstone@xxxxxxxxx>
To: "Web Enabling the IBM i (AS/400 and iSeries)"
<web400@xxxxxxxxxxxxxxxxxx>
Date: 07/01/2024 03:53 PM
Subject: Re: [WEB400] Digital Certificate Manager renew

GoDaddy

Cert

Sent by: "WEB400" <web400-bounces@xxxxxxxxxxxxxxxxxx>



I've never gotten a cert without a CSR.. Maybe Godaddy is

different.

I use

NameCheap.

On Mon, Jul 1, 2024 at 3:49 PM <joe.holt@xxxxxxxxxxx> wrote:

I've renewed the same cert without creating a new CSR for the

last 2

years

at least in DCM. You just import the cert as you did the original

and it

should work.

***
Joe W Holt
Sr Programmer/Engineer
Jack Onofrio Dog Shows, LLC
405.427.8181



From: "Brad Stone" <bvstone@xxxxxxxxx>
To: "Web Enabling the IBM i (AS/400 and iSeries)"
<web400@xxxxxxxxxxxxxxxxxx>
Date: 07/01/2024 03:37 PM
Subject: Re: [WEB400] Digital Certificate Manager renew

GoDaddy

Cert

Sent by: "WEB400" <web400-bounces@xxxxxxxxxxxxxxxxxx>



To renew, you usually do this:

1. In DCM, click renew certificate.
2. DCM generates a CSR
3. You go to the issuer of your cert and renew it, giving them

the

CSR

that DCM created.
4. Do some validation of ownership of the domain/property.
5. Get the cert from the issuer.
6. Import the cert into DCM.
7. Update any configs/app applications.
8. Restart server(s).



On Mon, Jul 1, 2024 at 1:09 PM Art Tostaine, Jr. <

atostaine@xxxxxxxxx

wrote:

Using systemname:2006/dcm. GoDaddy sent us an email that our

certificate

was renewed. I downloaded 2 CRT files and a PEM.

I thought it would be as easy as finding the certificate and

click

renew

and upload a new file. What is the process? When I click renew on

the

cert,

it asks if its local or Internet. When I click Internet I'm

setting

up

a

whole new CA?

Any help/links would be appreciated. I finally found some IBM

docs

but

it's

for the old CM.

https://www.ibm.com/support/pages/renewing-third-party-ssl-certificate-digital-certificate-manager-dcm

Thanks, Art
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)

mailing

list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)

mailing

list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.


--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)

mailing

list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)

mailing

list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.


--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)

mailing

list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)

mailing list

To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)

mailing

list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.