Help - Search - Members - Calendar
Full Version: geotrust cert...works for abc.com but gives warning for www.abc.com
The Planet Forums > Security > Encryption, SSL and Certificates
warren0728
i installed a geotrust certificate and if someone goes to the client store...say "www.abc.com" no problems but if the site is "abc.com" (no www) you get a warning message saying it might not be secure.

anyway to make the certificate work whether the www. is used or not?

ww
warren0728
bump....anybody?

ww

QUOTE (warren0728 @ Feb 2 2008, 01:35 AM) *
i installed a geotrust certificate and if someone goes to the client store...say "www.abc.com" no problems but if the site is "abc.com" (no www) you get a warning message saying it might not be secure.

anyway to make the certificate work whether the www. is used or not?

ww
markcausa
This is just how it is. You may want to setup an .htaccess to redirect people to www.abc.com so you they never experience this.
brianzimm
I think with ssl certificates if you buy one for the domain abc.com they also tag on www.abc.com.
But if you buy one for www.abc.com they also tag on www.www.abc.com.
Or if you buy one for ssl.abc.com they tag on www.ssl.abc.com.

You can check this in you web browser go to the ssl site and look

Click to view attachment

Hope this info helps.
markcausa
Brian, I think you're right! biggrin.gif
warren0728
i am resurrecting this thread because i haven't found a solution yet (the project got put on the backburner)

QUOTE (markcausa @ Feb 3 2008, 08:03 PM) *
This is just how it is. You may want to setup an .htaccess to redirect people to www.abc.com so you they never experience this.

where would i do this? and would would the code be?

actually it works for abc.com but not www.abc.com

when i ftp to the site....there is an "ssl" folder in the root directory....in that folder are two folders - "certs" and "private"

in the certs folder there are four files: "abc.com.crt", "abc.com.csr","www.abc.com.crt", "www.abc.com.csr"

in the private folder there are "abc.com.key" and "www.abc.com.key"

it seems like everything is there but i keep getting the error.....when i look at the details it says the cert is for abc.com and doesn't mention www.abc.com....

is there a way to reinstall a certificate....maybe that is the problem....
warren0728
i was told by ev-1 and by geotrust that if you sign up as abc.com they do not tag on www.abc.com because to the cert that is a subdomain.

the redirect info to setup an .htaccess to redirect people sounds interesting but i have no idea how to set that up. Anyone able to help with this.

currently i am trying to get the developer of the site to change his links which would solve everything....other than the redirect (if i could get it to work) i would have to purchase a new cert setup as www.abc.com and delete the old cert.

ww

QUOTE (brianzimm @ Feb 16 2008, 03:53 PM) *
I think with ssl certificates if you buy one for the domain abc.com they also tag on www.abc.com.
But if you buy one for www.abc.com they also tag on www.www.abc.com.
Or if you buy one for ssl.abc.com they tag on www.ssl.abc.com.

You can check this in you web browser go to the ssl site and look

Click to view attachment

Hope this info helps.
James Jhurani
If you want to do this using the web server just redirect the traffic using .htaccess or mod rewrite. If you want to use the DNS just change the A record for www to CNAME abc.com.
Angala Salawa
I also had this problem once .htaccess solved this do it this the solution.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.