Re: [cobalt-users] SSL Cert w/o DNS

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Michael Wass wrote:

> I have a client who wants us to run his secure server - while his web pages
> are served by his current host.
> 
> Can I set up https://secure.opsm.com.au
> 
> as a virtual site

Depends what you mean by "virtual" site.  If you mean 'can you host it
on a RaQ', the answer is yes.

If you mean can I put it on a shared IP#, the answer is 'no'.  It needs
it's own IP#.

> (no DNS) and he calls the secure server from his end.

I think you're slightly misunderstanding DNS Michael.  There needs to be
an entry in the 'opsm.com.au' zone file for 'secure.opsm.com.au'.  But
the DNS hosting doesn't change.  It stays where-ever it is now; except
that you need an A record for 'secure.opsm.com.au'.

> 2. I have tried (on its own IP address) and tried manually entering his
> Thawte certificate, but no go. i wind up getting the RAQ home
> self-generated certificate, and an error that says "certificate does not
> match public key."
> 
> Can anyone shed light on this please? Looks like another all-nighter :-).

Never set up a secure site on a RaQ, so I'll leave this up to someone
else.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
nobaloney.net
P. O. Box 52672
Riverside, CA  92517
voice: (909) 787-8589  *  fax: (909) 782-0205