SSL for sch.uk Domain

[fiza]

I am trying to purchase an SSL certificate for one of our webservers. The webserver is hosted in school and I have had the gfl people open up the relevant ports and assign a public IP. The site works fine but I want to secure it.

 

I have tried to buy an SSL from 123reg and put in "school.borough.sch.uk" as my domain. The site is found at "webserver.school.borough.sch.uk". When I say my domain is school.borough.sch.uk it gets thrown out as invalid.

 

what should I be putting as my domain? Is the School a sub-domain of the borough? Is that why I cant buy the certificate?

 

I have never bought an SSL cert for an sch.uk domain before and its very confusing!!

[localzuk]

I am trying to purchase an SSL certificate for one of our webservers. The webserver is hosted in school and I have had the gfl people open up the relevant ports and assign a public IP. The site works fine but I want to secure it.

 

I have tried to buy an SSL from 123reg and put in "school.borough.sch.uk" as my domain. The site is found at "webserver.school.borough.sch.uk". When I say my domain is school.borough.sch.uk it gets thrown out as invalid.

 

what should I be putting as my domain? Is the School a sub-domain of the borough? Is that why I cant buy the certificate?

 

I have never bought an SSL cert for an sch.uk domain before and its very confusing!!

 

SSL certs go by what you put in the CSR - so when it asks for the organisation (IIRC), you put in the domain it will be at. Otherwise, it'll default to what it thinks the domain should be, which will be whatever the machine's name is combined with the domain.

[fiza]

SSL certs go by what you put in the CSR - so when it asks for the organisation (IIRC), you put in the domain it will be at. Otherwise, it'll default to what it thinks the domain should be, which will be whatever the machine's name is combined with the domain.

So if the website is reachable on the internet at "webserver.school.borough.sch.uk" then is that what I put in the CSR as the "common name"?

[localzuk]

So if the website is reachable on the internet at "webserver.school.borough.sch.uk" then is that what I put in the CSR as the "common name"?

 

If that's its domain, yes. If it is school.borough.sch.uk, then you put that.

[pete]

It's often worth phoning up and talking to someone regarding .sch.uk. An embarrassing number of hosting companies / ssl providers don't know how the school.region.sch.uk dns structure works in the UK.

[timzim]

You can get SSL certs for .sch.uk sites for free through JANET. You have to go via your LEA (and mine didn't even know about it until I told them) but it will save you the hassles you are having right now.

 

See Obtaining a Server Certificate for a school

[fiza]

You can get SSL certs for .sch.uk sites for free through JANET. You have to go via your LEA (and mine didn't even know about it until I told them) but it will save you the hassles you are having right now.

 

See Obtaining a Server Certificate for a school

 

We are an LGfl School and atomwide want £75+VAT for a JANET Certificate to cover administration costs.

[Nodrog]

I think you have answered your own question here – getting the ssl certs to work is the trick and the fact that this post is rattling around tends to suggest that it’s not easy to actually do.

 

If the Janet one is free then why don’t you ask your LA to do it ? if they are in LGfL then they will either do it for you or pass you back to Atomwide who I guess will charge for the time to do all the Janet paperwork and then the application of it onto the systems.

 

Problem here is in this day and age of cut’s nobody does anything for free anymore nor can they afford to.

[grahamd22]

Just spoke to JANET and its the same for segfl (surrey) they haven't singed up for the certs either and they are very slow at getting anything done especially if we are the only school that are looking into it!

[craigrich]

I am trying to purchase an SSL certificate for one of our webservers. The webserver is hosted in school and I have had the gfl people open up the relevant ports and assign a public IP. The site works fine but I want to secure it.

 

I have tried to buy an SSL from 123reg and put in "school.borough.sch.uk" as my domain. The site is found at "webserver.school.borough.sch.uk". When I say my domain is school.borough.sch.uk it gets thrown out as invalid.

 

what should I be putting as my domain? Is the School a sub-domain of the borough? Is that why I cant buy the certificate?

 

I have never bought an SSL cert for an sch.uk domain before and its very confusing!!

 

Hi there,

 

We typically purchase SSL certs for schools by directly phoning 123reg directly, as their automated checkouts for SSL usually trips up when dealing with sch.uk domains.

 

If your looking for just SSL on webserver.school.borough.sch.uk, ask for a single SSL certificate for that domain. They may say it's not valid depending on who you talk to, but it is valid!

[Edu-IT]

We use GoDaddy for our SSL and everything seemed to work nicely. I think they did have to manually approve it, but it didn't take them long.

[edutech4schools]

seen lots of schools on these forums getting free certs for schools from SSL Certificates SSL Wildcard SSL Free Certificates SSL Server Certificate 256 bits

 

I have also been trying to get my head round the same issue as the original posters question. The confusion for some (mainly primary schools) is they do not control the firewall / dns which is looked after by the likes of swgfl etc.

 

My external url to get to an internal server is vpn.school.sch.uk when a user types this it is forwarded to *.*.*.5 which is our IIS server which is named server2.lan.

 

I have just requested a cert using vpn.school.school.sch.uk for its common name. Is this correct?