Difference between revisions of "Obtaining a Comodo Certificate"

From Mumble Wiki
Jump to: navigation, search
m (Changed pronouns to gender-neutral they-based pronouns)
 
(13 intermediate revisions by 5 users not shown)
Line 1: Line 1:
== Obtaining a Class 1 certificate from Comodo (Instantssl) using Internet Explorer ==
+
This article describes the process of obtaining a ''User Certificate''. The certificate will represent the trust in that the user owns the email address they specified.
  
 +
Servers identify themselves with a different kind of certificate. If you are looking for server certificates, this guide is not for you.
  
Comodo supports IE, Firefox, Opera and Flock, for obtaining the certificate.
+
== Obtaining a Class 1 certificate from Comodo (Instantssl) using Internet Explorer ==
 +
{{Notice
 +
|message=Getting the certificate with Chrome/Safari (webkit based) might seem to work at first, but you end up with an incomplete certificate bundle! Consider using an alternative browser.
 +
}}
 +
Comodo supports IE, Firefox, Opera and Flock, for obtaining the certificate. All images are click-able if more details are required.
  
 
# Go to http://www.instantssl.com/ssl-certificate-products/free-email-certificate.html  
 
# Go to http://www.instantssl.com/ssl-certificate-products/free-email-certificate.html  
# Click the Get it free now button next to 'Free Secure Email Certificate' [http://mumble.sourceforge.net/static/certguide/Instantssl_ie_1.jpg]
+
# Click the Get it free now button next to 'Free Secure Email Certificate'  
# Fill in your details. [http://mumble.sourceforge.net/static/certguide/Instantssl_ie_2.jpg] Press agree & continue. [http://mumble.sourceforge.net/static/certguide/Instantssl_ie_3.jpg]
+
#; [[File:Instantssl_ie_1.jpg|300px]]
 +
# Fill in your details.
 +
#; [[File:Instantssl_ie_2.jpg|300px]]
 +
# Press agree & continue.  
 +
#; [[File:Instantssl_ie_3.jpg|300px]]
 
# Wait for the confirmation mail to arrive in your mailbox.
 
# Wait for the confirmation mail to arrive in your mailbox.
# Follow the instructions in the mail, it should look something like in [http://mumble.sourceforge.net/static/certguide/Instantssl_ie_email.jpg].
+
# Follow the instructions in the mail (or go to [https://secure.comodo.net/products/!SecureEmailCertificate_Collec2 this link]), it should look something like this:
#: https://secure.comodo.net/products/!SecureEmailCertificate_Collec2
+
#; [[File:Instantssl_ie_email.jpg|300px]]
# Enter your email address and the security code given in the mail [http://mumble.sourceforge.net/static/certguide/Instantssl_ie_4.jpg].
+
# Enter your email address and the security code given in the mail  
# Certificate should be collected and installed in your browser [http://mumble.sourceforge.net/static/certguide/Instantssl_ie_5.jpg].
+
#; [[File:Instantssl_ie_4.jpg|300px]]
 +
# Certificate should be collected and installed in your browser  
 +
#; [[File:Instantssl_ie_5.jpg|300px]]
 
# Export the certificate to a file
 
# Export the certificate to a file
#; Export the certificate (Internet Explorer 8):
+
#;Export the certificate (Internet Explorer 8):
#: Select from "Tools" -> "Internet Options" -> "Content" -> "Certificates" -> "Personal" and locate your certificate from the list. If this is your first certificate it will be listed under the name "UTN-USERFirst-Client Authentication and Email". Click on "Export" -> "Next" -> "Yes, export the private key" -> "Next" -> "Next". Choose a password for your file and click "Next", choose a name for this backup file and save it at a known location.  
+
#:Select from "Tools" -> "Internet Options" -> "Content" -> "Certificates" -> "Personal" and locate your certificate from the list. If this is your first certificate it will be listed under the name "UTN-USERFirst-Client Authentication and Email". Click on "Export" -> "Next" -> "Yes, export the private key" -> "Next" -> "Next". Choose a password for your file and click "Next", choose a name for this backup file and save it at a known location.  
#; Export the certificate (Firefox 3.5)
+
#;Export the certificate (Firefox 3.5)
 
#:Select "Preferences" -> "Advanced" -> "Encryption" -> "View Certificates", choose the "Your Certificates" tab and locate your certificate from the list. The certificate will be listed with "UTN-USERFirst-Client Authentication and Email" as its name. Select the certificate and click on "Backup", choose a name for this backup file, provide a password and save it at a known location.
 
#:Select "Preferences" -> "Advanced" -> "Encryption" -> "View Certificates", choose the "Your Certificates" tab and locate your certificate from the list. The certificate will be listed with "UTN-USERFirst-Client Authentication and Email" as its name. Select the certificate and click on "Backup", choose a name for this backup file, provide a password and save it at a known location.
#[[Mumble_Import_Certificate|Import]] the certificate into Mumble.
+
#;Export the certificate (Opera 10.10)
 +
#:Select "Tools" -> "Preferences" -> "Advanced" (tab) -> "Security" -> "Manage Certificate" (button) -> "Personal" (tab) choose your certificate and click "Export" (button).
 +
 
 +
{{:Mumble_Import_Certificate}}
 +
 
 +
== I cannot connect after installing my certificate ==
 +
 
 +
If you cannot connect and "SSL Error: The root CA certificate is not trusted for this purpose" is logged to the server log, this is usually due to having an incomplete certificate bundle.
 +
 
 +
Please export the certificate using Firefox and try again.  Chrome and Safari are known to create incomplete certificate bundles.
 +
 
 +
[[Category:Documentation English]]

Latest revision as of 00:07, 13 May 2020

This article describes the process of obtaining a User Certificate. The certificate will represent the trust in that the user owns the email address they specified.

Servers identify themselves with a different kind of certificate. If you are looking for server certificates, this guide is not for you.

Obtaining a Class 1 certificate from Comodo (Instantssl) using Internet Explorer

Icons oxygen 48x48 actions view-pim-notes.png
Note:
Getting the certificate with Chrome/Safari (webkit based) might seem to work at first, but you end up with an incomplete certificate bundle! Consider using an alternative browser.

Comodo supports IE, Firefox, Opera and Flock, for obtaining the certificate. All images are click-able if more details are required.

  1. Go to http://www.instantssl.com/ssl-certificate-products/free-email-certificate.html
  2. Click the Get it free now button next to 'Free Secure Email Certificate'
    Instantssl ie 1.jpg
  3. Fill in your details.
    Instantssl ie 2.jpg
  4. Press agree & continue.
    Instantssl ie 3.jpg
  5. Wait for the confirmation mail to arrive in your mailbox.
  6. Follow the instructions in the mail (or go to this link), it should look something like this:
    Instantssl ie email.jpg
  7. Enter your email address and the security code given in the mail
    Instantssl ie 4.jpg
  8. Certificate should be collected and installed in your browser
    Instantssl ie 5.jpg
  9. Export the certificate to a file
    Export the certificate (Internet Explorer 8)
    Select from "Tools" -> "Internet Options" -> "Content" -> "Certificates" -> "Personal" and locate your certificate from the list. If this is your first certificate it will be listed under the name "UTN-USERFirst-Client Authentication and Email". Click on "Export" -> "Next" -> "Yes, export the private key" -> "Next" -> "Next". Choose a password for your file and click "Next", choose a name for this backup file and save it at a known location.
    Export the certificate (Firefox 3.5)
    Select "Preferences" -> "Advanced" -> "Encryption" -> "View Certificates", choose the "Your Certificates" tab and locate your certificate from the list. The certificate will be listed with "UTN-USERFirst-Client Authentication and Email" as its name. Select the certificate and click on "Backup", choose a name for this backup file, provide a password and save it at a known location.
    Export the certificate (Opera 10.10)
    Select "Tools" -> "Preferences" -> "Advanced" (tab) -> "Security" -> "Manage Certificate" (button) -> "Personal" (tab) choose your certificate and click "Export" (button).

Importing a certificate from file into Mumble

  1. Select Configure -> Certificate Wizard
    Import mumble 1.jpg
  2. Select import certificate. Click Next
  3. Locate the certificate file. It should end in .p12 or .pfx depending on which browser exported the certificate.
  4. Enter the password for the certificate
  5. The certificate details should now be filled in. Make sure that it is the correct certificate. Click next.
    Import mumble 2.jpg
  6. Confirm that you want to change your certificate by pressing next.
    Import mumble 3.jpg
  7. Done! Press finish to close the guide.
    Import mumble 4.jpg

I cannot connect after installing my certificate

If you cannot connect and "SSL Error: The root CA certificate is not trusted for this purpose" is logged to the server log, this is usually due to having an incomplete certificate bundle.

Please export the certificate using Firefox and try again. Chrome and Safari are known to create incomplete certificate bundles.