StartSSL Free Certificate

A free Class 1 certificate from StartSSL can be obtained and used with pump.io. However, an extra step is needed to prevent issues behind the scenes. This step is similar to using a StartSSL cert with Nginx.

• Obtain StartSSL cert at http://www.startssl.com/
• Fetch the Class 1 intermediate Server CA certificate
  • wget http://www.startssl.com/certs/sub.class1.server.ca.pem
• Concatenate your certificate with the Class 1 certificate into a "unified" certificate
  • cat pumpio.crt sub.class1.server.ca.pem > pumpio-unified.crt
• Use the "unified" certificate in your pump.io config, pump.io.json
  • "cert": "/path/to/pumpio-unified.crt",
• (Re)Start the pump
• Win

The above stated Nginx instructions also concatenate the StartSSL Root CA certificate as well. This can be concatenated into the pump.io certificate however, it is mostly unnecessary. The majority of the browsers in use already include this certificate. Also, it seems that including the ca.pem in the chain causes federation issues occasionally.

Also, to verify that your certificate chain is set up properly, either of these online tools can be used:

• Digicert
• SSL Labs