Last Sunday I had my first chance of buying an SSL certificate and setting it up on Nginx. Prior to that I have always just signed with my own CA, and then just import my own CA’s certificate into browser’s root certificate repository.
Anyway. What happened was on a website I am developing, I have provided some API via Javascript, so this guy I am partnering with can just include my dynamically generated Javascript to produce content on his site. However, his site runs entirely on HTTPS but mine is not, so you get that dreadful This Page Contains Both Secure and Non-Secure Items error message in some IE versions.
I guess the easiest way for me to fix it up is actually running the site on HTTPS as well. So I went out and bought a certificate from GoDaddy ($18/year — why so much price difference?), but it wasn’t that trivial as GoDaddy does not have any installation instruction for Nginx, which my site is running under. Why not?! Consider Ngnix already has a sizable market penetration (especially if are a Russian malware distributor). Well, here are the steps.