Solved

Enable SSL / Forwarding

Posted on 2011-09-11
10
386 Views
Last Modified: 2012-05-12
Hi Guys,

I've a tricky question here and would greatly appreciate your assistance.

There is a request from a user to Enable SSL on https://intranet.xyz.com.au (company name hidden for privacy purposes). The DNS record is currently setup to the point the above path to 172.20.102.33.

However unchanging the above the user has requested that the path should now be handled by another server (172.20.113.29)

Could you please suggest a solution.

Many thanks
0
Comment
Question by:japitsolution
  • 5
  • 2
10 Comments
 
LVL 21

Accepted Solution

by:
Papertrip earned 250 total points
ID: 36520744
All you need to do is change the A record for intranet.xyz.com.au in DNS to point to the new IP.

From the info you provided, this is not related to SSL, just DNS.
0
 

Author Comment

by:japitsolution
ID: 36520767
Any other suggestions apart from changing the initial DNS record.

Perhaps Conditional forwarding whereby the request for only https://intranet.xyz.com.au is handled by 172.20.113.29

Thanks
0
 
LVL 21

Expert Comment

by:Papertrip
ID: 36520826
That's a pretty hack-y way to approach the situation.  Is there a specific reason why non-https traffic for intranet.xyz.com.au needs to stay on 172.20.113.29 ?
0
 
LVL 21

Expert Comment

by:Papertrip
ID: 36520830
woops the IP in my last reply should be 172.20.102.33
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 13

Assisted Solution

by:khairil
khairil earned 250 total points
ID: 36520936
Hi,

It is ok to change the IP address of the server, but make sure is still use the same name, like over here intranet.xyz.com.au. You just need to install the cert on that new server.

But if name changed and you are not using wildcard cert then you have to aquire new cert for new name. You will need to generate new CRS from new machine, buy new cert base on the CSR and install that cert on your webserver.
0
 
LVL 13

Expert Comment

by:khairil
ID: 36520943
On DNS part, it is pretty easy to do, you just need to change the A record of intranet.xyz.com.au to new IP address only, if you not control the DNS then you should ask the authority who have access to it to change to reflect new IP.

The hard part is on the server, the server admin have to configure for the cert to work on the new server,  like I said above.
0
 
LVL 21

Expert Comment

by:Papertrip
ID: 36526768
No assisted solution?  My answer was first and just as valid as what you chose for the Accepted Solution...
0
 
LVL 21

Expert Comment

by:Papertrip
ID: 36526976
I request that #3 be pursued, with the following point distribution:

Accepted:  http:#36520744
Assisted: http:#36520936
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Most DNS problems are VERY easily troubleshot and identifiable if you can follow the steps a DNS query takes. I would like to share the step-by-step a DNS query takes from the origin to the destination. _____________________________________________…
I wrote this article to explain some important DNS concepts that should be known to avoid some typical configuration errors I often see in forums. I assume that what is described here is the typical behavior of Microsoft DNS client. I don't know …
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now