Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : How do I SSL secure a directory?

[hostingeye]

Hi;

I have a customer asking:

How do I configure a directory to be encrypted using SSL? I don't want to password protect the directory (this will be done using PHP), I just want to encrypt it.

Could someone help please

Regards

Nick

[pmabraham]

Greetings:

Secure Socket Layer (SSL) is used to encrypt communication between a client (for example a browser) and a server (for example a Web server).

SSL on the server is done based on a host name basis and can either be for one host name or a wild card.

It is not done on a given directory; but is applicable for the entire directory structure to which a host name has access.

Thank you.

[harryhood]

You would create a CSR (certificate signing request) for the domain (or subdomain.domain) that you wish to secure. Then either create a self-signed ssl certificate from the CSR or purchase a certificate from a company that sells more trusted certificates.

Once you have your certificate you install in on the domain and when the domain is accessed via https:// it will be encrypted.

[Corey Bryant]

Welcome to the forums Nick!

Also make sure that you put it for your domain - www.domain.com - (or another sub-domain if applicable). If you use the common name domain.com, then you can only use https://domain.com

[harryhood]

Correct, and in the manner if the certificate is for www.domain.com then you will only be able to use https://www.domain.com and not https://domain.com

[buyourweb]

I'm trying to do an SSL Certificate for a customer.They are using an osCommerce site. Do I need to place this website on a different IP then the rest of my customers?

Also any other tips for a newbie on this topic? I know once I get this site secured my other customers will want their ecommerce site ssecured also...

Thanks everyone in advanced

[Corey Bryant]

The SSL site needed to have a dedicated IP address. Each SSL cert you install will need to have its own IP address.

[buyourweb]

Corey

1) Do I just go into cPanel/WHM and Add New IP Address ( I have used 2 out of the 5 I have, first two are for DNS.

2) Change website for SSL old IP to new IP using cPanel/WHM
3) How do I add the New IP Address so everyone can find it.
4) Go out and buy SSL Correct.
?

Thanks again.

[Corey Bryant]

I am not a CPAnel person - sorry. I use Helm & Windows. You might post a question in the Control Panel topic area or search there to see how to designate an IP address to a certain client.

Once you do give a domain / URL an IP address, it should update automatically since you are the SOA. And then yes - check out www.ev1servers.net for their prices on SSLs.

[buyourweb]

Thanks Corey for your time.
I now understand the process a little more.

Peace

[buyourweb]

Have a little problem now!
I bought an SSL Certificate.
I change the domain to a dedicated IP address (Added New IP address though cPanel/WHM and change domain IP address though cPanel/WHM).
I installed the SSL certificate(Installed though cPanel/WHM).
Now when I type in the my domain www.domain.com I get my webhost main website????????????????
I have tried both http://www.domain.com and https://www.domain.com and it is like the site is no longer there.

Do I need to change nameservers or something, I know I'm missing something small.
Help

[Corey Bryant]

Did you put in the correct ports?

[AndyGambles]

have the DNS changes propogated?

Your DNS might be caching the previous shared IP rather than the new dedicated IP.

[buyourweb]

Hey Everyone thanks for all the help!
I have it all working now.
I had two little problems going on at the same time.

One - Was waiting a few for the DNS to propogated.

Two - I had to restart the whole server after config. For some reason just restarting services wasn't working.