Skip to content

Instantly share code, notes, and snippets.

@skynet
Created December 11, 2014 01:29
Show Gist options
  • Save skynet/b7e580178c502e1445a6 to your computer and use it in GitHub Desktop.
Save skynet/b7e580178c502e1445a6 to your computer and use it in GitHub Desktop.
StartSSL.com

A free Class 1 certificate from StartSSL can be obtained and used with pump.io. However, an extra step is needed to prevent issues behind the scenes. This step is similar to using a StartSSL cert with Nginx.

  • Obtain StartSSL cert at http://www.startssl.com/
  • Fetch the Class 1 intermediate Server CA certificate
    • wget http://www.startssl.com/certs/sub.class1.server.ca.pem
  • Concatenate your certificate with the Class 1 certificate into a "unified" certificate
    • cat pumpio.crt sub.class1.server.ca.pem > pumpio-unified.crt
  • Use the "unified" certificate in your pump.io config, pump.io.json
    • "cert": "/path/to/pumpio-unified.crt",
  • (Re)Start the pump
  • Win

The above stated Nginx instructions also concatenate the StartSSL Root CA certificate as well. This can be concatenated into the pump.io certificate however, it is mostly unnecessary. The majority of the browsers in use already include this certificate. Also, it seems that including the ca.pem in the chain causes federation issues occasionally.

Also, to verify that your certificate chain is set up properly, either of these online tools can be used:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment