enjay Posted August 15, 2013 Posted August 15, 2013 (edited) How do I get an SSL certificate for http://remote.school.county.sch.uk? I tried startssl.com, but they won't let me do it with a subdomain... Edited August 15, 2013 by enjay
Oaktech Posted August 15, 2013 Posted August 15, 2013 I don't know, but I need to find out. The best I could come up with was from Janet, but the wildcard cert I need seems to cost an arm and a leg.
glennda Posted August 15, 2013 Posted August 15, 2013 Well technically that is a subdomain on a subdomain is it not? Why not just remote.school.county.sch.uk?
pete Posted August 15, 2013 Posted August 15, 2013 I'd second the remote.school.county.sch.uk - there's no need for a "www" We bought our certs through GoDaddy who (for what I've used them for) were fine once I'd explained how the school.county.sch.uk thing works.
enjay Posted August 15, 2013 Author Posted August 15, 2013 Sorry, I meant it without the www - yes, I want a certificate for remote.school.county.sch.uk I'll try GoDaddy, thanks. I used them at my last school and was impressed.
enjay Posted August 15, 2013 Author Posted August 15, 2013 GoDaddy cost money though, so I'd need to wait for September. StartSSL are free...
enjay Posted August 15, 2013 Author Posted August 15, 2013 Alternatively, do I actually need a new SSL certificate? People are used to getting errors when using RM EasyLink anyway, so does it matter if they get one when using HAP?
kearton Posted August 15, 2013 Posted August 15, 2013 I've just bought 2 SAN certificates (via YHGfL, via JANET) which were just over half the price of wildcard certs...
SYNACK Posted August 16, 2013 Posted August 16, 2013 StartSSL are free... @enjay ??? One month trial I thought, have I missed something?
MordyT Posted August 16, 2013 Posted August 16, 2013 @enjay ??? One month trial I thought, have I missed something? I use startssl for free (renew every year). You can see it at MordyT.com
TechieWils Posted August 16, 2013 Posted August 16, 2013 I used startssl and it is free. The way to get your county subdomain (mine is school.bham.sch.uk) to get your version of bham.sch.uk in the list email tech support and say please. It's all I did and within the day they had added it to the list and I was good to go. Also it is preferred to a cert for hap. Hope that helps. 1
Boredguy Posted August 16, 2013 Posted August 16, 2013 I ordered my SSL certifcates via the SWGfL deal with Janet. Although they are used to it @enjay having a certificate does cut down on the screen clicks they have to do. We got the certificate to cover our whole intranet subdomain, as well as another one for our RDP gateway server
pete Posted August 16, 2013 Posted August 16, 2013 Alternatively, do I actually need a new SSL certificate? People are used to getting errors when using RM EasyLink anyway, so does it matter if they get one when using HAP? Why isn't RM Easylink using a valid cert? edit: OK, of the first 40* sites on Google for "RM Easylink" 35 have invalid certs (expired, internal CA, misconfigured chain or some combination of) and 5 have valid certs. Are these setup improperly by RM from the start? -- Use a valid SSL cert because the money you save on not buying one is lost in the "it says the cert is invalid" support calls and queries. Not to mention you're adding unnecessary steps in order to use a service and teaching end-users to ignore SSL warnings. *I got bored after 40.
enjay Posted August 16, 2013 Author Posted August 16, 2013 Why isn't RM Easylink using a valid cert? I think it is because the certificate has the server's internal name on it, e.g. sch-sr-001, not a public-facing remote.school.county.sch.uk
Boredguy Posted August 16, 2013 Posted August 16, 2013 When RM launched Easylink back in the early 2000's, most browsers did not care if the certificate was self signed, and there was a link on the page for them to download and install the certificate on their own workstation. Most sites continued to use the self certified certificate as the same one is used for the RMMC on the network and setting up multi-homed self certified ones was a complete pita.
enjay Posted August 16, 2013 Author Posted August 16, 2013 I used startssl and it is free. The way to get your county subdomain (mine is school.bham.sch.uk) to get your version of bham.sch.uk in the list email tech support and say please. It's all I did and within the day they had added it to the list and I was good to go. No such like. StartSSL want to charge me $59 to check my identify and another $59 to check my organisation, and I need to get County to sign something and send it off saying that I am responsible for school.county.sch.uk Surely I'm not the first person with a school.county.sch.uk domain who wants to install HAP - how did the rest of you get round this?
synaesthesia Posted December 9, 2013 Posted December 9, 2013 Necrothread We asked nicely and StartSSL put ours (northants.sch.uk) in the list. However, we're looking at wildcards now to cover us for the future and StartSSL looks less and less promising as time goes on. In fact, as it's ordering page gives us an SSL error and doesn't load (lol?) we've decided to give it a well deserved wide berth and are looking to pay instead. Waiting for a reply from GoDaddy but perhaps more input would be appreciated.
AngryTechnician Posted December 9, 2013 Posted December 9, 2013 Do you absolutely have to use the .sch.uk domain? A cheaper option might be to simply get a .co.uk domain for the school and use a free cert from StartSSL for it. CS New Media will register you a .co.uk for £9 for 2 years.
synaesthesia Posted December 9, 2013 Posted December 9, 2013 As said, I have no intention of using StartSSL. Although we have done in the past, it looks beyond dodgy now. It would be rather an upheaval to swap domain names at this point.
AngryTechnician Posted December 9, 2013 Posted December 9, 2013 That's fair enough, I was thinking more about new deployments I suppose. Curious about what you;'e seeing with the StartSSL pages, I redid our certs just over a week ago and it was fine for me.
localzuk Posted December 9, 2013 Posted December 9, 2013 We went direct to JANET. Ditto. Well, we got it via our local authority from JANET (they're supposed to service geographical area, and not just state schools from what I have been told).
synaesthesia Posted December 9, 2013 Posted December 9, 2013 (edited) Looks like we're going GoDaddy. JANET refused to speak to us pretty much - the impression I got was they're rather in the dark ages. (May have misunderstood their email). If it's not from an RBC or LA they're not interested. LA, here? No check. RBC? No check. Have to be part of an organisation - check, well, not as far as they're concerned. Not to worry. For startSSL, their login page on any browser is showing SSL errors It looks like they're going under some changes, they certainly need some. Edited December 9, 2013 by synaesthesia
Arthur Posted December 9, 2013 Posted December 9, 2013 GoGetSSL are cheaper than GoDaddy for wildcard certificates.
synaesthesia Posted December 9, 2013 Posted December 9, 2013 Doesn't look bad, although the level of English on that page means I'm disappointed the language selection tool at the top doesn't say "Engrish". I guess I'm too darn picky
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now