The Design of Software (CLOSED)

A public forum for discussing the design of software, from the user interface to the code architecture. Now closed.

The "Design of Software" discussion group has been merged with the main Joel on Software discussion group.

The archives will remain online indefinitely.

How do you SSL enable a web site?

or a subset of a web page? e.g. a shopping basket.

I have never had to do it before and it has always been a puzzle.
Ace
Thursday, February 16, 2006
 
 
It depends on your web server how you actually do it, but generally speaking you need to obtain a certificate from a certificate autority (which can be yourself if you have a certificate server, but normally you will use an official one for production use). Then you install the certificate and enable SSL.
smalltalk Send private email
Thursday, February 16, 2006
 
 
Can this be switch on only on certain web pages?

I am thinking of a site that isn't SSL encrypted until you log in.
Ace
Thursday, February 16, 2006
 
 
SSL is where you have https rather then http

As soon at you go to an https site such as a bank your browser and the server negioate a secure connection.  The site can be full open, but the connection is encrypted.  When the login happens does not matter.

You must use domains for SSL, such as www.mydomain.com or mydomain.com  You use your web server to generate a key which you submit to the certificate authority such as verisign and then buy the certifcate from then and install it on your server. 

Verisign has alot of good information on their site, check this first
http://www.verisign.com/products-services/security-services/ssl/ssl-information-center/faq/index.html

If you have any specific questions post back here and I'll try to help, I'm not an expert but I have done it a few times.
Lee
Thursday, February 16, 2006
 
 
You are also required to have a static IP.  Servers that use virtual hosting are not an option since the virtual host resolution happens above the SSL layer.  Because of this, the proper virtual host cannot be determined to find the appropriate certificate.
Ryan Britton Send private email
Friday, February 17, 2006
 
 

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics
 
Powered by FogBugz