Security and privacy

SSL Certificate for Moodle

 
 
Picture of Tim Childe
SSL Certificate for Moodle
 

I've searched up and down for how to secure my Moodle site with SSL, everything I can find is starts AFTER getting the certificate and installing it.

 

I need to obtain a SSL certificate that I can use for Moodle, but I can't justify paying through the nose to secure what is only a small site, with parts as a test site to be moved later.

 

Problem is, I don't want to let anyone sign up to anything until I have SSL - which makes moodle useless, and it looks like my host wants to charge lots for this.

 

Advice please??

I've seen StartSSL Free (www.startssl.com) - will one of theirs do??

Any other ideas?

 

Thanks

Tim.C

 

 
Average of ratings: -
Picture of Tim Childe
Re: SSL Certificate for Moodle
 

One idea that just came to mind... has anyone had experience using a self signed certificate??

 

Free, but a hassle for the users.  My users wouldn't need the 3rd party trust for the site as it will be a private invitation only site anyway, just need some encryption to protect the data and to prevent hacking.

 
Average of ratings: -
Picture of Dave Perry
Re: SSL Certificate for Moodle
Group Particularly helpful MoodlersGroup Testers

If using shared hosting you're pretty much dependent on them anyway (unless it's Apache hosting and you can put your certificate stuff in .htaccess? Not tried).

If cost is that much of an issue, and you can't pass it on through what you're charging users, find a host that's cheaper on SSL? But you want reliability, so might have to bite the bullet. If it's education, you can probably get it cheaper but depends if you can send the hosting outfit a pre-purchased certificate package.

 
Average of ratings: -
Picture of Tim Childe
Re: SSL Certificate for Moodle
 

Can't pass on the cost, as the main use is for a charity that maybe able to justify the cost if it gets used, but is only just looking at a pilot roll out at the moment.

(I'm the treasurer of the charity, so I know there's no spare cash wink  )

I may contact my host as providing a 'one click install' package of software in a manner that is inherently insecure and so not fit for purpose is a bit naff.  Hopefully I'm missing something.

 

 

 
Average of ratings: -
Picture of Gian van der Spuy
Re: SSL Certificate for Moodle
 

I am using moodle on a Scientific Linux server (RHEL clone) with a self-signed certificate without any problems. The only difference is that the first time someone visits a secure page on my server, they have to download the certificate and allow a certificate exception in their web-browser.

 
Average of ratings: -
Picture of Howard Miller
Re: SSL Certificate for Moodle
Group DevelopersGroup Documentation writersGroup Particularly helpful Moodlers

Of course, a big part of using a 'real' certificate is that it confirms that you are who you say you are. A self-signed certificate still could be anybody. That (supposedly) is what you are paying for from the certificate issuer. 

 
Average of ratings: -