+ Post New Thread
Page 1 of 3 123 LastLast
Results 1 to 15 of 38
Home Access Plus+ Thread, Internal Access to HAP not working in Projects:; Hi I set up HAP recently and had it running on a server signed certificate for a while whilst testing ...
  1. #1

    Join Date
    May 2011
    Location
    United Kingdom
    Posts
    520
    Thank Post
    126
    Thanked 18 Times in 18 Posts
    Rep Power
    11

    Internal Access to HAP not working

    Hi

    I set up HAP recently and had it running on a server signed certificate for a while whilst testing it. That worked but you needed to click confirm past the security warning.

    I have now set it up with an external URL and a free certificate from startssl. This works externally fine but i still cannot access it internally without the certificate warning.

    Externally i access it using https://hap.schoolname.co.uk

    If i try this address in work it just fails to load.

    Any ideas? I think i have missed something as it's my first time playing around with SSL certificates and IIS.

    Cheers

  2. #2
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,294
    Thank Post
    52
    Thanked 167 Times in 147 Posts
    Rep Power
    49
    You need to create a reverse lookup zone in DNS called "school name.co.UK" then create an A record of "HAP" pointing to your web servers internal IP. I did this and it works great. Let me know if you have any trouble. Matt

  3. #3

    Join Date
    May 2011
    Location
    United Kingdom
    Posts
    520
    Thank Post
    126
    Thanked 18 Times in 18 Posts
    Rep Power
    11
    Quote Originally Posted by fairm010 View Post
    You need to create a reverse lookup zone in DNS called "school name.co.UK" then create an A record of "HAP" pointing to your web servers internal IP. I did this and it works great. Let me know if you have any trouble. Matt
    Hi

    Would that need to be done on my IIS server or via names.co.uk?

    If you have anymore detailed steps they would be greatly appreciated

  4. #4

    nickbro's Avatar
    Join Date
    Jul 2010
    Location
    Gilwern, Wales
    Posts
    3,637
    Thank Post
    39
    Thanked 530 Times in 456 Posts
    Rep Power
    118
    What is the error message that's coming up, the domain name doesn't match, or it doesn't trust startssl?

    It's it's the latter then you need to update your root certificates

  5. #5
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,294
    Thank Post
    52
    Thanked 167 Times in 147 Posts
    Rep Power
    49
    It needs to be done on your internal DNS servers on your network. If you need more detailed instructions I'll hop on a PC soon.

  6. Thanks to fairm010 from:

    tj2419 (14th August 2014)

  7. #6

    Join Date
    Mar 2011
    Posts
    19
    Thank Post
    1
    Thanked 6 Times in 4 Posts
    Rep Power
    9
    Could also need proxy exceptions, assuming you have an upstream proxy. The easiest way to test this is to disable the proxy settings in your browser and try the HAP server via its IP - i.e. https://192.168.0.200/hap or whatever your server IP is.

  8. #7

    Join Date
    May 2011
    Location
    United Kingdom
    Posts
    520
    Thank Post
    126
    Thanked 18 Times in 18 Posts
    Rep Power
    11
    Quote Originally Posted by jdmackay View Post
    Could also need proxy exceptions, assuming you have an upstream proxy. The easiest way to test this is to disable the proxy settings in your browser and try the HAP server via its IP - i.e. https://192.168.0.200/hap or whatever your server IP is.
    Hi I can access the server via the IP address. But it still comes up with the certificate warning whether using the startssl certificate (as it is issued to schoolname.co.uk). Is there anyway to prevent the certificate warning when accessing via IP for computers on the domain?

    Thanks

  9. #8
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,294
    Thank Post
    52
    Thanked 167 Times in 147 Posts
    Rep Power
    49
    To not see the certificate warning the URL must match the certificate. If you go down the DNS route you wont see it.

  10. #9

    Join Date
    May 2011
    Location
    United Kingdom
    Posts
    520
    Thank Post
    126
    Thanked 18 Times in 18 Posts
    Rep Power
    11
    Do you have any more detailed steps on how to do it via DNS?

    Thanks

  11. #10
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,294
    Thank Post
    52
    Thanked 167 Times in 147 Posts
    Rep Power
    49
    Sure, give me a while to draw them up.

  12. Thanks to fairm010 from:

    tj2419 (14th August 2014)

  13. #11

    Join Date
    Mar 2011
    Posts
    19
    Thank Post
    1
    Thanked 6 Times in 4 Posts
    Rep Power
    9
    This suggests that you need a proxy exception for the fully qualified DNS name of the server, as you would access it in the browser, in addition to some local DNS stuff mentioned by others. I only suggested using the IP for testing purposes. You can add the exceptions for everyone using whatever method you use to distribute proxy settings to clients.

  14. #12
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,294
    Thank Post
    52
    Thanked 167 Times in 147 Posts
    Rep Power
    49
    1) Go to your primary DNS server (Normally your DC)
    2) Open DNS and create a new Primary zone under forward lookup zones to all DNS Servers.
    3) Call it under zone name schoolname.co.uk
    4) Create an A record in that zone called HAP and point it to your IIS servers IP.
    5) Give it a while to propagate (5 mins) and try browsing to the site. If you ping HAP.schoolname.co.uk internally it should reply with your IIS servers IP.

  15. #13

    Join Date
    May 2011
    Location
    United Kingdom
    Posts
    520
    Thank Post
    126
    Thanked 18 Times in 18 Posts
    Rep Power
    11
    Right, i can access the site internally via the URL now. But for some reason still getting a certificate warning :S Same URL externally, no problems.

    Any ideas?

  16. #14
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,294
    Thank Post
    52
    Thanked 167 Times in 147 Posts
    Rep Power
    49
    Are you sure that the URLs match exactly? Subdomains and all?

  17. #15

    Join Date
    May 2011
    Location
    United Kingdom
    Posts
    520
    Thank Post
    126
    Thanked 18 Times in 18 Posts
    Rep Power
    11
    Quote Originally Posted by fairm010 View Post
    Are you sure that the URLs match exactly? Subdomains and all?
    Yes, i am using a shortcut that is on our VLE that people currently use outside of school. https://hap.schoolname.co.uk/hap

SHARE:
+ Post New Thread
Page 1 of 3 123 LastLast

Similar Threads

  1. Replies: 0
    Last Post: 24th March 2011, 09:57 AM
  2. Replies: 4
    Last Post: 10th March 2010, 09:11 AM
  3. External access to WAMP not working
    By actech in forum Web Development
    Replies: 4
    Last Post: 22nd January 2009, 09:48 AM
  4. XLS to CSV not working for pupil info
    By MK-2 in forum ICT KS3 SATS Tests
    Replies: 3
    Last Post: 24th January 2007, 01:30 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •