
|
View Full Version : Turn off system prompt when you url https:// (SSL)
Fremont Servers 07-14-2002, 10:56 AM I have seen a link that takes someone into SSL but they don't get any system bases prompts for going into SSL (https://) area.
How do you turn off that prompt off?
From the same pc, when I go to some sites via https://, it prompts you when you use https://, and some sites don't prompt you when you use https://.
cbaker17 07-14-2002, 11:13 AM huh??? ssl sites arent supposed to prompt you unless theres something wrong with the ssl certificate.
Fremont Servers 07-14-2002, 11:21 AM The ssl certificate that I am using is the default ssl certificate that came with PLESK 2.0.
Ahmad 07-14-2002, 12:20 PM You have to purchase your own certificate.
Try a search in this board for 'ssl certificate'.
allera 07-14-2002, 12:22 PM Did you read the prompts? Plesk doesn't come with a trusted cert, only a self-signed cert. Thus, you'll get a prompt about the cert not being trusted. You'll need to purchase an SSL cert from a trusted company (Verisign, Thawte, etc) for the prompts to go away.
Go to a site where you don't get a prompt and review the cert. Then go to a site where you do get the prompt and review that cert. You'll notice the differences.
Fremont Servers 07-14-2002, 12:39 PM I see now. I actually read the prompt this time.
The problem is you cannot use the same ssl certificate on each domain with unique ip address. You can use the same ssl cert. on as many domains if they use the same ip address.
Therefore, there is no way around this, but to purchase an ssl cert. for each domain if each domain is using a static ip address, am I right? Well, is there a way around this that I don't know?
chirpy 07-14-2002, 03:39 PM More or less, yes.
Each domain needs to have it's own SSL certificate. Normally, in Apache, each domain must also have a unique IP address for the secure server.
cbaker17 07-14-2002, 03:41 PM Actually you can get a star certificate which will allow you to use subdomains so you could use the same cert for multiple domains, but its about 500.00.
Dedicated 07-14-2002, 03:54 PM Or you can just buy one ssl and any domain on the server need's to use the ssl can use https://www.yourdomain.com/~username/
chirpy 07-14-2002, 03:58 PM But beware of falling foul of your agreement with the Certificate Authority if you do that. You're likely to be in breach of contract if you allow other businesses to use your certificate. For example, this would be a breach of contract with the standard Thawte SSL Server certificate.
Fremont Servers 07-14-2002, 04:31 PM I wonder how could web hosting companies offer SSL, if each certificate is around $100-$200/year.
If they use https://www.yourname.com/~username, then wouldn't it violates the Certification Authority like Chirpy said above.
If a host charges $10/month, wouldn't ssl cert. alone exceeds the $10/month.
There must be a general way of doing this without purchasing an ssl cert. for each domain.:confused:
Or like cbaker17 said...you star certificate. But how companies out there use this method?
chirpy 07-14-2002, 04:33 PM These days, most hosting companies require the customer to purchase the SSL certificate. What you do, however, is offer the customer the ability to use that (their) certificate on their hosting plan.
aquos 07-14-2002, 04:49 PM In general, when you've got a prompt when entering a HTTPS site is because the cert is not listed as a trusted cert. All of the 'brand name' cert companies are under Tools->Internet Options->Content->Certificates->Trusted Root Certification Authorities and Intermediate Certification Authorities (MSIE).
When the (https) site owner(s) buy/install a cert (from one of those companies), or you import a new trusted root certification authorities and/or intermediate certification authorities, you won't be prompted any more.
:rolleyes:
RRolfe 07-14-2002, 05:13 PM Originally posted by Asia
I wonder how could web hosting companies offer SSL, if each certificate is around $100-$200/year.
If they use https://www.yourname.com/~username, then wouldn't it violates the Certification Authority like Chirpy said above.
If a host charges $10/month, wouldn't ssl cert. alone exceeds the $10/month.
There must be a general way of doing this without purchasing an ssl cert. for each domain.:confused:
Or like cbaker17 said...you star certificate. But how companies out there use this method?
if a host is offer ssl included in the package then it is a shared ssl certificate and the urls are normally https://username.host.com
its called a wildcard certificate and normally cost about $500.00
Fremont Servers 07-14-2002, 05:25 PM What is the diffference between star cert. and wildcard cert?
When you say $500, do you mean $500/year?
Last, but not least, where can i get this cert.
RRolfe 07-14-2002, 05:38 PM Originally posted by Asia
What is the diffference between star cert. and wildcard cert?
When you say $500, do you mean $500/year?
Last, but not least, where can i get this cert.
star cert, wildcard cert... its all the same thing. :)
$500/year... YES.
get one at: http://www.geotrust.com
Fremont Servers 07-14-2002, 05:42 PM Thank you all, I think I will get star/wild cert.
Unless you want to add something else.
Again, thank you all for your help. :D
|