+ Post New Thread
Results 1 to 12 of 12
Internet Related/Filtering/Firewall Thread, SSL for sch.uk Domain in Technical; I am trying to purchase an SSL certificate for one of our webservers. The webserver is hosted in school and ...
  1. #1

    fiza's Avatar
    Join Date
    Dec 2008
    Location
    London
    Posts
    2,266
    Thank Post
    455
    Thanked 322 Times in 272 Posts
    Rep Power
    155

    SSL for sch.uk Domain

    I am trying to purchase an SSL certificate for one of our webservers. The webserver is hosted in school and I have had the gfl people open up the relevant ports and assign a public IP. The site works fine but I want to secure it.

    I have tried to buy an SSL from 123reg and put in "school.borough.sch.uk" as my domain. The site is found at "webserver.school.borough.sch.uk". When I say my domain is school.borough.sch.uk it gets thrown out as invalid.

    what should I be putting as my domain? Is the School a sub-domain of the borough? Is that why I cant buy the certificate?

    I have never bought an SSL cert for an sch.uk domain before and its very confusing!!

  2. #2

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    18,302
    Thank Post
    523
    Thanked 2,593 Times in 2,012 Posts
    Blog Entries
    24
    Rep Power
    887
    Quote Originally Posted by fiza View Post
    I am trying to purchase an SSL certificate for one of our webservers. The webserver is hosted in school and I have had the gfl people open up the relevant ports and assign a public IP. The site works fine but I want to secure it.

    I have tried to buy an SSL from 123reg and put in "school.borough.sch.uk" as my domain. The site is found at "webserver.school.borough.sch.uk". When I say my domain is school.borough.sch.uk it gets thrown out as invalid.

    what should I be putting as my domain? Is the School a sub-domain of the borough? Is that why I cant buy the certificate?

    I have never bought an SSL cert for an sch.uk domain before and its very confusing!!
    SSL certs go by what you put in the CSR - so when it asks for the organisation (IIRC), you put in the domain it will be at. Otherwise, it'll default to what it thinks the domain should be, which will be whatever the machine's name is combined with the domain.

  3. Thanks to localzuk from:

    fiza (19th September 2012)

  4. #3

    fiza's Avatar
    Join Date
    Dec 2008
    Location
    London
    Posts
    2,266
    Thank Post
    455
    Thanked 322 Times in 272 Posts
    Rep Power
    155
    Quote Originally Posted by localzuk View Post
    SSL certs go by what you put in the CSR - so when it asks for the organisation (IIRC), you put in the domain it will be at. Otherwise, it'll default to what it thinks the domain should be, which will be whatever the machine's name is combined with the domain.
    So if the website is reachable on the internet at "webserver.school.borough.sch.uk" then is that what I put in the CSR as the "common name"?

  5. #4

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    18,302
    Thank Post
    523
    Thanked 2,593 Times in 2,012 Posts
    Blog Entries
    24
    Rep Power
    887
    Quote Originally Posted by fiza View Post
    So if the website is reachable on the internet at "webserver.school.borough.sch.uk" then is that what I put in the CSR as the "common name"?
    If that's its domain, yes. If it is school.borough.sch.uk, then you put that.

  6. #5


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,701
    Thank Post
    279
    Thanked 787 Times in 614 Posts
    Rep Power
    226
    It's often worth phoning up and talking to someone regarding .sch.uk. An embarrassing number of hosting companies / ssl providers don't know how the school.region.sch.uk dns structure works in the UK.

  7. Thanks to pete from:

    fiza (19th September 2012)

  8. #6

    Join Date
    Jun 2007
    Location
    London
    Posts
    895
    Thank Post
    64
    Thanked 171 Times in 140 Posts
    Rep Power
    56
    You can get SSL certs for .sch.uk sites for free through JANET. You have to go via your LEA (and mine didn't even know about it until I told them) but it will save you the hassles you are having right now.

    See Obtaining a Server Certificate for a school

  9. #7

    fiza's Avatar
    Join Date
    Dec 2008
    Location
    London
    Posts
    2,266
    Thank Post
    455
    Thanked 322 Times in 272 Posts
    Rep Power
    155
    Quote Originally Posted by timzim View Post
    You can get SSL certs for .sch.uk sites for free through JANET. You have to go via your LEA (and mine didn't even know about it until I told them) but it will save you the hassles you are having right now.

    See Obtaining a Server Certificate for a school
    We are an LGfl School and atomwide want £75+VAT for a JANET Certificate to cover administration costs.

  10. #8

    Join Date
    May 2012
    Posts
    50
    Thank Post
    0
    Thanked 6 Times in 6 Posts
    Rep Power
    7
    I think you have answered your own question here – getting the ssl certs to work is the trick and the fact that this post is rattling around tends to suggest that it’s not easy to actually do.

    If the Janet one is free then why don’t you ask your LA to do it ? if they are in LGfL then they will either do it for you or pass you back to Atomwide who I guess will charge for the time to do all the Janet paperwork and then the application of it onto the systems.

    Problem here is in this day and age of cut’s nobody does anything for free anymore nor can they afford to.

  11. #9
    grahamd22's Avatar
    Join Date
    Aug 2007
    Location
    Wallington, Surrey
    Posts
    70
    Thank Post
    11
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Just spoke to JANET and its the same for segfl (surrey) they haven't singed up for the certs either and they are very slow at getting anything done especially if we are the only school that are looking into it!

  12. #10

    Join Date
    Jan 2013
    Location
    Oxford
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    On behalf of a sch.uk school

    Quote Originally Posted by fiza View Post
    I am trying to purchase an SSL certificate for one of our webservers. The webserver is hosted in school and I have had the gfl people open up the relevant ports and assign a public IP. The site works fine but I want to secure it.

    I have tried to buy an SSL from 123reg and put in "school.borough.sch.uk" as my domain. The site is found at "webserver.school.borough.sch.uk". When I say my domain is school.borough.sch.uk it gets thrown out as invalid.

    what should I be putting as my domain? Is the School a sub-domain of the borough? Is that why I cant buy the certificate?

    I have never bought an SSL cert for an sch.uk domain before and its very confusing!!
    Hi there,

    We typically purchase SSL certs for schools by directly phoning 123reg directly, as their automated checkouts for SSL usually trips up when dealing with sch.uk domains.

    If your looking for just SSL on webserver.school.borough.sch.uk, ask for a single SSL certificate for that domain. They may say it's not valid depending on who you talk to, but it is valid!

  13. #11

    Edu-IT's Avatar
    Join Date
    Nov 2007
    Posts
    7,328
    Thank Post
    404
    Thanked 649 Times in 593 Posts
    Rep Power
    188
    We use GoDaddy for our SSL and everything seemed to work nicely. I think they did have to manually approve it, but it didn't take them long.

  14. #12

    Join Date
    Apr 2010
    Posts
    2,151
    Thank Post
    105
    Thanked 190 Times in 157 Posts
    Rep Power
    84
    seen lots of schools on these forums getting free certs for schools from SSL Certificates SSL Wildcard SSL Free Certificates SSL Server Certificate 256 bits

    I have also been trying to get my head round the same issue as the original posters question. The confusion for some (mainly primary schools) is they do not control the firewall / dns which is looked after by the likes of swgfl etc.

    My external url to get to an internal server is vpn.school.sch.uk when a user types this it is forwarded to *.*.*.5 which is our IIS server which is named server2.lan.

    I have just requested a cert using vpn.school.school.sch.uk for its common name. Is this correct?



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 0
    Last Post: 25th January 2011, 04:35 PM
  2. [Hosting] Register .sch.uk domain and hosting
    By thenetworkmanager in forum Web Development
    Replies: 3
    Last Post: 14th July 2010, 12:37 PM
  3. [Hosting] Register .sch.uk domain and self-hosting
    By thenetworkmanager in forum Web Development
    Replies: 4
    Last Post: 1st July 2010, 02:09 AM
  4. Do you use your .sch.uk domain name?
    By Stuart_C in forum General Chat
    Replies: 41
    Last Post: 21st January 2010, 09:10 PM
  5. .sch.uk domain server questions..anyone?
    By Sirbendy in forum Web Development
    Replies: 30
    Last Post: 4th January 2008, 02:38 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •