(this email was also posted on the web-based community forum - yesterday)

Hi,

We just purchased a basic SSL certificate from Godaddy and every time we add the certificate, everything that uses SSL becomes unusable.  Internet Explorer 8 (PC) says "Internet Explorer cannot display the webpage - What you can try: diagnose connection problems".  Flock (Mac) says:

   An error occurred during a connection to 204.238.32.70:7443.

   Cannot communicate securely with peer: no common encryption algorithm(s).

   (Error code: ssl_error_no_cypher_overlap)

   The page you are trying to view can not be shown because the authenticity of the received
   data could not be verified.

   	 * Please contact the web site owners to inform them of this problem.

The process we followed was:

1) On the SSL Certificate page of the admin site for surgemail, clicked on get new CSR, entered appropriate information.  When this was done, clicked on SAVE CHANGES. We got an error saying that it wasn't created because ssl/surge_priv.pem existed and needed to be deleted.  (of course this causes a problem with the certificate and requires us to add an exception for the certificate).

2) Deleted /usr/local/surgemail/ssl/surge_priv.pem

3) repeated the operation to get a CSR several times.  This had to be done on numerous times because despite requesting a 2048 bit key every time, the first four or five attempts yielded only a 1024 bit key.

4) obtained a new certificate from Godaddy.

5) pasted new certificate followed by Godaddy’s intermediate certificate under SSL certificate(s).  We also commented each certificate as shown here: http://netwinsite.com/surgemail/help/secure.htm.

As soon “Save Changes” is clicked then nothing works.  The only way to get any SSL connection into the server / email is to delete surge_csr.pem, surge_cert.pem and surge_priv.pem and reboot the machine.  We believe we followed the correct procedure.  Did we?

Anything you could do to help would be very much appreciated.

Thank you.