在另一台服务器上为我们的网站设置 HTTPS/SSL 证书
我对 https 世界还很陌生,所以请耐心等待。
涉及 2 个 Web 服务器:
Webserver1 已经在组织中存在了几年,并且正在托管/运行多个使用 https 加密的网站(app1.ourcompany.com、app2.ourcompany.com 等)。它具有有效的签名证书。
Webserver2 是一个新服务器,由我负责。我的任务是设置 https 并获取证书等。它上面运行着一个 Web 应用程序,但它没有域名(只有 IP 地址)...据我最近了解到,这是一个要求获取签名证书。
我想知道的是 - 是否可以在 Webserver1 上设置一个站点,该站点指向我在 Webserver2 上托管的站点(即 SiteOnWebserver2.ourcompany.com),该站点也使用 Webserver1 的签名/验证证书?
感谢您的宝贵时间,各位大师!
- 担
I'm pretty new to the https world, so bear with me.
There are 2 web-servers involved:
Webserver1 has been in the organization a few years and is hosting/running multiple websites with https encryption (app1.ourcompany.com, app2.ourcompany.com, etc). It has a valid, signed certificate.
Webserver2 is a new server, for which I am responsible. I am tasked with setting up https and getting the certificate, etc. It has a web app running on it, but it does not have a domain name (only has an IP address)...which as I recently learned, is a requirement for a signed certificate.
What I'd like to know is this -- is it possible to set up a site on Webserver1 that points to the site I'm hosting on Webserver2 (ie SiteOnWebserver2.ourcompany.com) which also utilizes the Webserver1's signed/verified certificate?
Thanks for your time, SO gurus!
--Dan
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
常规 SSL 证书仅对单个域名有效(例如
app1.ourcompany.com
)。如果这是当前使用的证书类型,则现有的 SSL 证书将无法在您的新服务器上运行。如果您确实尝试了此操作,您会在浏览器中收到错误消息,指出该站点的域名与 SSL 证书中的名称不匹配。另一种选择是使用通配符 SSL 证书。此类证书被分配给某个父域(例如
ourcompany.com
),并且适用于所有子域。此类证书适用于app1.ourcompany.com
、app2.ourcompany.com
以及您的SiteOnWebserver2.ourcompany.com
。A regular SSL certificate is valid for only a single domain name (such as
app1.ourcompany.com
). If this is the type of certificate currently being used then the existing SSL certificates will not work on your new server. If you did try this you would get an error in the browser saying that the site's domain name doesn't match the name in the SSL certificate.The other option is to use a wildcard SSL certificate. These kinds of certificates are assigned to a certain parent domain (like
ourcompany.com
) and will work for all subdomains. This kind of certificate would work forapp1.ourcompany.com
,app2.ourcompany.com
, as well as yourSiteOnWebserver2.ourcompany.com
.