Godaddy EV SSL Certificates With DigitalOcean CentOS Server Setup

[conn]

Hello,

I am familiar with setting up a server and am using Digitalocean to do so: https://docs.2600hz.com/sysadmin/doc/install/install_via_centos7/

I was just wondering about setting up SSL with it. Would a Godaddy Extended Domain & Business Validation (EV)  certificate work?

[mc_]

There's a page from a while ago: https://docs.2600hz.com/dev/applications/crossbar/doc/securing_crossbar/

It shows setting up a self-signed certificate but you can just skip to where the guide configures Crossbar. Should work as expected once you restart Crossbar.

Another option is to use HAProxy or similar in front of Crossbar to handle SSL termination.

[conn]

On 9/4/2018 at 9:50 AM, mc_ said:

There's a page from a while ago: https://docs.2600hz.com/dev/applications/crossbar/doc/securing_crossbar/

It shows setting up a self-signed certificate but you can just skip to where the guide configures Crossbar. Should work as expected once you restart Crossbar.

Another option is to use HAProxy or similar in front of Crossbar to handle SSL termination.

Does that mean I cannot use something like Godaddy's Godaddy EV SSL Certificates?

[mc_]

You just need to get the cert in the right location. Honestly HAProxy fronting it is probably a better solution anyway, since you can load balance among servers running Crossbar, stay up-to-date on the encryption/cipher suites better, etc.

[conn]

37 minutes ago, mc_ said:

You just need to get the cert in the right location. Honestly HAProxy fronting it is probably a better solution anyway, since you can load balance among servers running Crossbar, stay up-to-date on the encryption/cipher suites better, etc.

Interesting. So, do you guys have any tutorials for the HAProxy option? Or is this just something I have to "go google"?

[mc_]

Yeah, its a pretty straightforward setup of pointing DNS to your HAProxy instead of Crossbar, configuring it with the SSL certs, and setting up the backends with your Crossbar instances. Any HAProxy guide should do the trick.

[conn]

7 hours ago, mc_ said:

Yeah, its a pretty straightforward setup of pointing DNS to your HAProxy instead of Crossbar, configuring it with the SSL certs, and setting up the backends with your Crossbar instances. Any HAProxy guide should do the trick.

Got it. Thanks a ton!