Free SSL Certificates for JANET connected schools

Some of you may find this useful.

http://www.ja.net/services/scs.html

Quote:

---

With effect from 30 November 2006, JANET is offering two types of server certificates to its customers:

The first is provided through an agreement between TERENA and GlobalSign; this allows JANET to act as a Registration Authority (RA) to provide GlobalSign server certificates to JANET connected organisations. JANET will absorb the cost of providing the certificates, so there is at present no charge to organisations. These certificates cannot be used for commercial transactions so cannot be used to secure credit card transactions or any other request that will result in the transfer of money between people or organisations.

---

The faq sheet doesn't seem to want to load though :/

Dos_Box:
seems fine to me, maybe your browser?

Yup. Firefox crashed. Damm. Anyway. Here is the FAQs link.

http://www.ja.net/services/publicati...rtificates.pdf

Just sent in my e-mail request for info, will keep you posted on how it goes!

Quote:

---

Hello Chris,

We currently supply tickets to 'JANET primary connections' and local
authorities who are connected to the JANET network.

With this in mind, we would not be able to assist you on this occasion.

Kind regards,

---

It was worth a try!

Sorry slight off topic, how do you deal with multiple SSL Certificates with one public IP address?

Quote:

---

Originally Posted by joe90bass

Just sent in my e-mail request for info, will keep you posted on how it goes!

---

I forgot to add that your RBC has to apply to be the certificate 'issuer' and any orders should go through them once they have applied to join the scheme.

So when are CLEO/LGfL doing that then? :)

Quote:

---

Originally Posted by plock

Sorry slight off topic, how do you deal with multiple SSL Certificates with one public IP address?

---

The only way to use multiple certificates (presumably with HTTPS) with one IP address is to use a distinct port for each certificate you want to use, and provide links in the format https://domain.name:port/. Alternatively you can use one certificate with multiple names defined in the SubjectAltName attribute. The JANET Certificate Service permits this. You just need to supply the appropriate CSR.

I use IP based virtual hosts to avoid these headaches. :)

JANET are rebuilding their site and the information is now available from http://www.ja.net/services/server-ce...e-process.html

I think it may be worth contacting JANET and ask for a list of RBCs that have signed up to be issuers.

Quote:

---

Originally Posted by chaz6

Quote:

---

Originally Posted by plock

Sorry slight off topic, how do you deal with multiple SSL Certificates with one public IP address?

---

The only way to use multiple certificates (presumably with HTTPS) with one IP address is to use a distinct port for each certificate you want to use, and provide links in the format https://domain.name:port/. Alternatively you can use one certificate with multiple names defined in the SubjectAltName attribute. The JANET Certificate Service permits this. You just need to supply the appropriate CSR.

---

Cheers for that, this has been put on hold at the moment. I read somewhere about a Multiple Domain Certificate. What is this? How does this work?

Cheers.

It's a wildcard certificate. It basically vaild for *.yourdomain.lea.sch.uk.

So for example, if we had a wildcard certificate here for our domain .carrhill.lancs.sch.uk it would mean I could put up new systems called

something.carrhill.lancs.sch.uk
otherthing.carrhill.lancs.sch.uk

and the wildcard cert would be valid for them.

A bit more clarification from the folks at JANET.

The RBC has to be the 'owner' of the domain (ie the tag has to be with them) for a certificate to be registered and authorised for the domain. eg lodgepark.northants.sch.uk will not be given one because we are the owner, not EMBC.

This seems a little strange to me as a recent conversation with Nominet gave the impression that schools were owners of their domains irregardless who the tag holder was.

Can anyone tell me if they are the owner of their own domain or whether your RBC is? This is going to be an interesting one now as the way it stands no school in Northants can get a certificate.

Quote:

---

Originally Posted by Geoff

It's a wildcard certificate. It basically vaild for *.yourdomain.lea.sch.uk.

---

This is not what I was referring to. I meant having distinct domains in the certificate, for example:

www.domain1.com
www.domain2.com
mail.domain3.com

However you can use a wildcard if you only want to serve sites from one domain.