Bart
Member
Registered: 19th Aug 02
Location: Midsomer Norton, Bristol Avon
User status: Offline
|
I currently have a single SSL certificate for remote.mydomain.co.uk
However, after adding a new management system on the backend of our website, Id like to consider upgrading the whole domain to use https.
I was wondering whats actually involved in converting the whole website to https?
i.e
- would any html files actually have to be modified?
- I believe we have DNS records to point remote.mydomain.co.uk to our server for outlook web access, so presumeably, the new SSL certificate would have to be installed on our exchange server/PDC
|
Dom
Member
Registered: 13th Sep 03
User status: Offline
|
If you want to only cover the website then the easiest option is to grab another 'single name' certificate (note that some CA's 'single name' certificates cover the root and 'www' subdomain) and apply it to your hosting (most hosts require you to have a dedicated IP address if you're wanting to use a certificate).
Otherwise if you want to cover the entire root domain + subdomain then use a wildcard certificate; just make sure the CA allows you to use the certificate across multiple IP's if you've got subdomains pointing to other (physical) servers.
You don't need to modify the website in any way, other than applying the certificate to your hosting and adding a rewrite rule if you want to force users to use HTTPS.
|
Bart
Member
Registered: 19th Aug 02
Location: Midsomer Norton, Bristol Avon
User status: Offline
|
thanks Dom.
I think the only thing I need to check is that we're not using absolute addresses, i.e http://www.mydomain.co.uk/css/style.css".
I don't think we are, so it shouldn't be a problem.
|
Whittie
Member
Registered: 11th Aug 06
Location: North Wales Drives: BMW, Corsa & Fiat
User status: Offline
|
Have you got access to IIS?
Happy to set it up for you if needbe Bart. Can do it in 10 minutes.
You'll need a dedicated IP on your hosting, and just need to bind the domain to https.
[Edited on 12-11-2014 by Whittie]
|
pow
Premium Member
Registered: 11th Sep 06
Location: Hazlemere, Buckinghamshire
User status: Offline
|
SSL certificates confuse the fuck out of me
|
John
Member
Registered: 30th Jun 03
User status: Offline
|
What's the spare IP required for?
|
Dom
Member
Registered: 13th Sep 03
User status: Offline
|
quote:
Originally posted by John
What's the spare IP required for?
Was thinking the same, you just need a static/dedicated address for your domain; i believe it's possible with a shared address but can't say i've ever done it.
quote:
Originally posted by pow
SSL certificates confuse the fuck out of me
What's confusing about them?
The only confusing part of SSL certificates is the prices CA's like to charge 
|
Bart
Member
Registered: 19th Aug 02
Location: Midsomer Norton, Bristol Avon
User status: Offline
|
well, I have my own domain and just purchased a cheap SSL certificate and also got automatic redirection of HTTP to HTTPS and it works a treat.
Its near on instant with no downtime or page errors.
Ive copied our management system to my personal site and everything works without any errors, so im fairly confidant to do the same on the live domain now.
Will do it Friday night just to be safe.
[Edited on 12-11-2014 by Bart]
|
