[Cc-webedit] [Fwd: Re: Server work done today]

[Jon Leighton]

We are already sorting out a CACert certificate for the CMS and other
stuff. I didn't think to raise this earlier, but it might be worth
looking at getting a commercial SSL certificate in order to avoid the
warnings, especially if we are using it for mail. Jim, what do you
think?

Also, is there an issue with using the same SSL certificate across 2
different IP addresses? Potentially we'd have 1 IP for
mail.climatecamp.org.uk (at nologic) and another IP for the rest
(tachanka).

I think it's worth spending some money on this though. An extra IP
address shouldn't cost too much.

However, there is an issue about what people go to check mail. At the
moment I think a lot of people use http://mail.nologic.org/ - this has
no SSL. Presumably if we get SSL, that would only apply to
http://mail.climatecamp.org.uk/, so we'd need some way to ensure people
go there. Alternatively, we could basically give nologic whatever money
they need to set up SSL for mail.nologic.org, and then make
mail.climatecamp.org.uk just redirect there.

Thoughts?

On Wed, 2009-10-14 at 10:43 +0100, iggyp imc wrote:
> get the cert, 
> 
> 
> 2009/10/13 Neil <neil_bye at hotmail.com>
>         What do people think? Sorry if this repeats but  it wasn't
>         coming up on
>         the list.
>         
>         In peace Neil
>         
>         
>         ---------- Forwarded message ----------
>         From: "Ciaran Johnston" <cj at nologic.org>
>         To: "Neil" <neil_bye at hotmail.com>
>         Date: Tue, 13 Oct 2009 11:07:17 +0100 (IST)
>         Subject: Re: [Cc-webedit] Server work done today
>         Hi Neil,
>         Apologies for not getting back sooner on the SSL issue. It's
>         not quite as
>         simple as configuring an SSL certificate - in order for the
>         certificate to
>         work correctly we would need to acquire and maintain a
>         separate IP address
>         for that domain name.
>         
>         If you would like us to set this up for you we can do so -
>         I'll have to
>         come back to you with the cost.
>         
>         Regards,
>         Ciaran.
>         
>         Neil wrote:
>         > Hi Ciaran
>         >           Please look at the comment below. Is it right, can
>         you sort it
>         > out.
>         >
>         > In peace Neil
>         >
>         > Hi all,
>         >
>         >> Hi Ciaran
>         >>   People on the new website team are worried about
>         security. Is there a
>         >> version of Squirrel mail that can prvide SSL. If not could
>         you supply
>         >> another system that does.
>         > Just to clarify, any version of SquirrelMail supports SSL,
>         it's just a
>         > case of registering an SSL certificate for
>         mail.climatecamp.org.uk (or
>         > *.climatecamp.org.uk) and changing a couple of lines in the
>         config.
>         >
>         > Carl.
>         >
>         >
>         >
>         >
>         
>         
>         
>         
>         _______________________________________________
>         Cc-webedit mailing list
>         Cc-webedit at lists.aktivix.org
>         https://lists.aktivix.org/mailman/listinfo/cc-webedit
>         
> 
> 
> _______________________________________________
> Cc-webedit mailing list
> Cc-webedit at lists.aktivix.org
> https://lists.aktivix.org/mailman/listinfo/cc-webedit