View Attach (5) Info

Add new attachment

Only authorized users are allowed to upload new attachments.

List of attachments

Kind Attachment Name Size Version Date Modified Author Change note
png
 generate.png 56.9 kB 1 05-Dec-2023 05:32 Ben Spink
png
 generate_button.png 38.0 kB 1 05-Dec-2023 05:32 Ben Spink
png
 import.png 71.1 kB 1 05-Dec-2023 05:32 Ben Spink
jpg
 prefs_ssls1.jpg 114.5 kB 1 05-Dec-2023 05:32 Ada Csaba
png
 sign.png 75.6 kB 1 05-Dec-2023 05:32 Ben Spink

This page (revision-19) was last changed on 05-Dec-2023 05:32 by Ada Csaba

This page was created on 05-Dec-2023 05:32 by Ben Spink

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Difference between version and

At line 3 changed one line
*IIS - If you already have a certificate in IIS, you can export that certificate as a .PFX file and use that certificate directly in CrushFTP. [*Export IIS Certificate*|IISExport]\\
*[IIS|IISExport] - If you already have a certificate in IIS, you can export that certificate as a .PFX file and use that certificate directly in CrushFTP. [*Export IIS Certificate*|IISExport]\\
At line 12 changed one line
Starting from scratch, go to your Preferences, Encryption, SSL tab. Click 'Generate Now' on the Step 1 section.\\
Starting from scratch, go to your __Preferences->Encryption->SSL__ tab. Click 'Generate Now' on the Step 1 section.\\
At line 15 changed 2 lines
Fill in the information about your company.\\
[attachments|generate.png]\\
This will create the java key store for you (the .JKS file). This holds your certificate private key, the critical part you never want to loose or give away. Fill in the information about your company.\\
[{Image src='prefs_ssls1.jpg' width='..' height='..' align='left' style='..' class='..' }]
At line 18 changed 2 lines
This will create the java key store for you (the .JKS file). This holds your certificate private key, the critical part you never want to loose or give away.
;Keystore Algorithm:the SSL key pair algorithm, must be RSA (prefilled)
;Key Size: the private key prime number size in bits. Most CAs require 2048 or above
;Sig Algorithm: the public key signature algorithm. Most CAs require SHA256 or stronger
;Domain Name: the Subject field value of the cert, must match the base domain name the cert is issued to. In case of a single domain cert, must match exactly the domain name. Does not accept wildcard domain name.
;Validity Days: the validity time interval in days of the private key. Must be set a larger value than the max certification days the CA offers, at least 2 years, usually 10.
;SANs: the Subject Alternate Name field value of the cert. Must be set same as the Domain Name (Subject). In case of multi domain ( multi-SAN certs) a comma separated list of domains and/or subdomains. Accepts wildcard domain names, like *.domain.com (wildcard cert).
;Department, Company, City, State and CC: end entity related data,non critical values, the fields however can not be empty.
;Email: end entity's email address, some CAs send a confirmation email to this address, when the cert is issued, or expires, etc. Must be a valid email address.
;Path: a local folder path on the server, where we save the keystore ( .jks) file.
;File name: the keystore (.jks) file name we will use to save the keystore as.
;Password and Confirm password: the keystore protection password. We set same as the private key password.
\\
SSL certificates theory, external link (not affiliated) [https://en.wikipedia.org/wiki/X.509#PKIX_Working_Group|https://en.wikipedia.org/wiki/X.509#PKIX_Working_Group]
\\
\\
At line 36 changed one line
On most Operating Systems Java ships crippled by default due to US export laws. Its extremely annoying, but you must manually copy a couple files into your java install to allow CrushFTP to use strong cryptography keys (almost all keys these days.)\\
The final step is to restart the HTTPS server item, on Preferences->[IP/servers|IP Servers], this step is __mandatory__, in order to actually load the new certificate. Alternatively, can restart the CrushFTP service/daemon itself.
----
!!5.)
__OBSOLETE, only for Java 8 and older:__ On most Operating Systems Java ships crippled by default due to US export laws. Its extremely annoying, but you must manually copy a couple files into your java install to allow CrushFTP to use strong cryptography keys (almost all keys these days.)\\
Version Date Modified Size Author Changes ... Change note
19 05-Dec-2023 05:32 8.24 kB Ada Csaba to previous SSL ==> SSLCerts
18 05-Dec-2023 05:32 8.24 kB Ada Csaba to previous | to last
17 05-Dec-2023 05:32 8.246 kB Ada Csaba to previous | to last
16 05-Dec-2023 05:32 8.249 kB Ada Csaba to previous | to last
15 05-Dec-2023 05:32 6.597 kB Ada Csaba to previous | to last
14 05-Dec-2023 05:32 6.531 kB Ada Csaba to previous | to last
13 05-Dec-2023 05:32 6.588 kB Ada Csaba to previous | to last
12 05-Dec-2023 05:32 6.523 kB Ada Csaba to previous | to last
11 05-Dec-2023 05:32 6.519 kB Ada Csaba to previous | to last
10 05-Dec-2023 05:32 6.521 kB Ada Csaba to previous | to last
9 05-Dec-2023 05:32 6.295 kB Ada Csaba to previous | to last
8 05-Dec-2023 05:32 6.295 kB Ada Csaba to previous | to last
7 05-Dec-2023 05:32 6.241 kB Ben Spink to previous | to last
6 05-Dec-2023 05:32 6.229 kB Ben Spink to previous | to last
5 05-Dec-2023 05:32 6.203 kB Ben Spink to previous | to last
4 05-Dec-2023 05:32 6.256 kB Ben Spink to previous | to last
3 05-Dec-2023 05:32 6.041 kB Ben Spink to previous | to last
2 05-Dec-2023 05:32 3.304 kB Ben Spink to previous | to last
1 05-Dec-2023 05:32 3.239 kB Ben Spink to last
« This page (revision-19) was last changed on 05-Dec-2023 05:32 by Ada Csaba
G’day (anonymous guest)
CrushFTP11 | What's New

Referenced by
LeftMenu

JSPWiki