ady199 Posted July 4, 2017 Share Posted July 4, 2017 Guys, Can anyone recommend a site where I can get a free 1 year SSL Certificate from - my last one has now ran out (they no longer issue free certs). Its to be used on a test Exchange 2016 setup. Thanks in advance Link to comment Share on other sites More sharing options...
Daedroth Posted July 4, 2017 Share Posted July 4, 2017 Let's Encrypt offer free SSL certificates: https://letsencrypt.org/ Depicus 1 Share Link to comment Share on other sites More sharing options...
Xahid Posted July 4, 2017 Share Posted July 4, 2017 I guess, you are looking for https://letsencrypt.org/ Link to comment Share on other sites More sharing options...
+BudMan MVC Posted July 5, 2017 MVC Share Posted July 5, 2017 On 7/4/2017 at 5:16 AM, ady199 said: used on a test Exchange 2016 setup If this a TEST setup - why does it have to be public signed cert. Just fire up your own CA - AD does this pretty much out of the box. Create your certs - any devices just need the CA cert to trust this CA.. This very common practice in "TEST" setups!! Also allows for not registered domains and use of rfc1918 address in your SAN this way, etc. Why more flexible that getting some "free" cert. Grab a copy of openssl, read a few howtos - there you go if you don't want to do it with MS AD CA.. Or grab https://sourceforge.net/projects/xca/ Or multiple other frontends for openssl if your not good at cmd line work. goretsky 1 Share Link to comment Share on other sites More sharing options...
sc302 Veteran Posted July 6, 2017 Veteran Share Posted July 6, 2017 Self signed certs work too. Link to comment Share on other sites More sharing options...
+BudMan MVC Posted July 6, 2017 MVC Share Posted July 6, 2017 They do - but they are more difficult to get a browser to trust.. Recently it has become harder and harder. its much easier to just create a CA for your internal/testing use - then just deploy the ca cert to any client that will need to trust certs you sign with your CA. This is really simple one time setup, and now you can issue certs for any of your devices/services and your browsers will trust them automatically. If your running AD, you already have a CA up and running. Set them up to be good for 10 years And you wont have to worry about them for quite some time.. Most likely you will have retired the device or service before you need to redo your certs. Any of my devices or services that present https I install signed certs from my CA.. Even setup my windows machines that are not members of any domain to use them for their RDP certs so no prompts or warnings when accessing them this way here is my switch via ssl. And can even hit devices ip, when you put them in as SAN on your cert and get your pretty green https icon Just so much you can do when you fire up your own CA. Link to comment Share on other sites More sharing options...
Recommended Posts