FoxInCloud
Foxincloud & SSL
Gravatar is a globally recognized avatar based on your email address. Foxincloud & SSL
  Michele
  thn@foxincloud.com
  Apr 21, 2015 @ 10:59pm
Come customers begin to ask me to protect their app with SSL protocol. Can my foxincloud app work with SSL. Can i configure my web site in this way ? If yes, are there some suggests to configure it ?

Gravatar is a globally recognized avatar based on your email address. Re: Foxincloud & SSL
  FoxInCloud Support - Thierry N.
  Michele
  Apr 22, 2015 @ 01:23am
Hi Michele,

You need to configure this at the IIS level, nothing specific to FoxInCloud ...
- get a certificate
- install on the server
- in your domain name server, make sure that https:// is routed to your ip:SSL port
maybe some other web connect developers have a larger experience (Michael Hogan?)

Some customers begin to ask me to protect their app with SSL protocol. Can my foxincloud app work with SSL. Can i configure my web site in this way ? If yes, are there some suggests to configure it ?


-- thn (FoxInCloud)

Gravatar is a globally recognized avatar based on your email address. Re: Foxincloud & SSL
  n/a
  Michele
  Apr 22, 2015 @ 06:17am
Michele,

As Thierry noted, SSL is a web server feature that can protect anything that it can serve. This is one time that using Windows actually makes something easier. There are many online tutorials on purchasing and installing certificates on Win machines and almost all vendors have very specific instructions for various IIS versions. You will want a commercial certificate purchased from Thawte, or whoever, because these brands already have root certs in all the major browsers. This means the browsers will accept their certs without question. Most OS's can mint their own private certs without cost, but the root will have to be manually installed on all the user's browsers and that is quite a chore!

Among the many mistakes I have made with certs in the past was not including both www.mysite.com AND mysite.com on the cert application. I didn't think it would matter, but some browsers complained. Also, if yoursite.com serves multiple sites like sales.yoursite.com and foxincloud.yoursite.com, and so on, a vendor can sell you a cert that can work across multiple sites.

One thing I would recommend from experience is to initially leave both http and https site running for performance testing. Https requires the server to do some heavy-duty processing to encrypt the page before sending to the user. You can compare response times for equivalent requests by using both http and https. FIC processing times may be LESS than tls encoding times! This will allow your customer to see if the additional response delay is tolerable. It is most noticeable on a loaded server, but hopefully won't be a problem for you. If it is, there are several open-source SSL accelerator schemes available.

Good Luck - James


Come customers begin to ask me to protect their app with SSL protocol. Can my foxincloud app work with SSL. Can i configure my web site in this way ? If yes, are there some suggests to configure it ?


© 1996-2024