SSL certificate

The market exchanges data only with stores that operate over HTTPS using an SSL certificate. An SSL certificate is needed to establish a secure connection and encrypt messages.

The SSL certificate must be signed by an official certification authority. A self-signed certificate is not suitable. Information about certification authorities can be found on the Internet. SSL certificates can be either paid or free. Commercial certificates usually last longer and are supported.

SSL certificate generation

1. Install the utility OpenSSL.

2. Generate a private key using the command openssl genrsa -out server.key 2048.

3. Execute the certificate request using the command: openssl req -new -key server.key -out server.csr.

4. Specify the relevant data in the lines:

   Country Name (2 letter code) [AU]:
   State or Province Name (full name) [Some-State]:
   Locality Name (eg, city) []:
   Organization Name (eg, company) [Internet Widgits Pty Ltd]:
   Organizational Unit Name (eg, section) []:
   Common Name (eg, YOUR name) []:
   Email Address []:
   Please enter the following 'extra' attributes to be sent with your certificate request
   A challenge password []:
   An optional company name []:
   

   Please note:

   • The most important line to fill in — Common Name, in which you must specify the store's domain name.

   • In the line Country Name The name of the country must be specified in accordance with the standard. ISO 3166.

   • The domain e-mail address or the e-mail address of the site administrator must be specified.

5. Transfer the file server.csr located in the directory /home/login/, to be signed by the organization that issues SSL certificates.

6. Install the certificate you received from the certificate authority on your web server according to the instructions for it.

Certificate change

If the SSL certificate has expired, you need to get a new one and install it on your web server.

If you have previously used a self-signed certificate, no additional actions are required when changing to a certificate signed by a certificate authority.

The verification of the store's certificate with a new digital signature begins immediately after the certificate is changed.

In case of problems with the certificate, the request logs will contain an error like SSL_ERROR.

Find out more

Authorization