SSL certificate for .sch.uk domain?

[localzuk]

So we need a new SSL cert, and my temp replacement over the last year bought one for a ridiculous price (£150 for a 1 year standard SSL cert!).

 

Does anyone have a recommendation as to where we can get a highly recognised SSL cert cheaply - it isn't handling any financial stuff. In this case it'll be securing a RD Web Access server.

 

They must be able to handle the whole 'not having an email address such as [email protected]' etc... As we don't use the school domain for email and don't have it set up for it at all.

[synaesthesia]

StartSSL works just fine for us, as does IPSCA with the same conditions. Cheap enough. (free!)

[localzuk]

StartSSL is for 'personal only'? I've had an email saying I have to provide my personal residence details, which I'm not going to do. I'll have a look at IPSCA.

[FN-GM]

123-reg ?

[penfold_99]

I would only use IPSCA if you had to as they have had issues with browsers supporting their certificates.

[localzuk]

IPSCA also does not behave correctly with the site.domain.county.sch.uk system. They reckon the domain is county.sch.uk so they try to send an email to the admin contact for that domain...

[MYK-IT]

We have just recently purchased a 5 Year Wildcard Domain SSL Certificate (Single Domain with Unlimited Sub Domains) from GoDaddy ~ £280 + VAT for same reason (RemoteApps, HAP etc)

 

Domain validation was completed quickly and easily by just uploading a generated file to your Domain Name (e.g. School website)

Edited February 7, 2013 by MYK-IT

[Netman]

^ We too use a wildcard cert from GoDaddy - no problems with recognition and decent value too...

[fiza]

I asked a similar question on here a while back. Ended up getting a cert through JANET.

 

http://www.edugeek.net/forums/security/98908-will-ssl-certificate-do-job.html

 

edit: Sorry wrong link

 

http://www.edugeek.net/forums/internet-related-filtering-firewall/101461-ssl-sch-uk-domain.html

Edited February 7, 2013 by fiza

[localzuk]

I've just contacted the LEA here to see if they can make the request for us, as that's what JANET say to do.

[synaesthesia]

Not had that issue with either of the products I mentioned. Yes we did have to enter some personal details for StartSSL but not a massive problem for us - same address as the site etc. Wouldn't pay for one.

[edutech4schools]

IPSCA also does not behave correctly with the site.domain.county.sch.uk system. They reckon the domain is county.sch.uk so they try to send an email to the admin contact for that domain...

 

I had the same issue but the actual cert was correct. When I called them they said it was an automated email system but the actual cert gets created by a human.

[KK20]

our IPSCA did the same - failed on email but passed after human intervention.

 

Not had an issue with modern browsers although older mobiles ones do fail. We added the cert to our early ipads later ones are ok.

[Homeland]

Please excuse my ignorance but what is the SSL cert used for ???

[localzuk]

Secure web sites and services.

[FN-GM]

Secure web sites and services.

 

To expand slightly. It makes the connection between the PC and the server encrypted. Have you ever noticed on a website the url is https:// not http:// - This means the connection is secure.

[Homeland]

I understand that but we have never had any issue with https and as far as I am aware we have never purchased an SSL cert either.

[FN-GM]

I understand that but we have never had any issue with https and as far as I am aware we have never purchased an SSL cert either.

 

Do you host any https sites? Or just access them?

[Homeland]

Just access them the school doesn't host anything like that, Is that what the certificate is for then to access hosted sites ?? I suppose I would need one for when I have Smoothwall installed so teachers can access via the VPN, but I am led to believe that Smoothwall will create its own cert for the VPN.

[FN-GM]

You only need to buy one if your hosting the kit.

 

Smoothwall will have a self assigned certificate, you can install this on the machines so it trusts the smoothwall box.

 

You should go for direct access rather than smoothwall. The teachers just turn on the laptop connect to WIFI and the VPN connection is Automatically established.

[Homeland]

You should go for direct access rather than smoothwall. The teachers just turn on the laptop connect to WIFI and the VPN connection is Automatically established.

 

That's what I would prefer to be honest, its amazing how much hand holding you have to do with teachers, will have to look into how this is done when it arrives unless someone has info on it already.

Edited April 28, 2013 by Homeland

[KK20]

scenario for you:

 

If you have an intranet that you happily use then you decided to open it up so you can access the system externally (from home for instance). If you have a https: page for logon then a "self certified" certificate will flag up big warnings to the PCs at home (since they arent on your domain so they dont understand that your server is "trusted"). A purchased SSL certificate will prevent this. Of course you can tell your teachers to ignore this warning - however this is a *bad* thing to get the teachers into the habit of doing...