https - SSL: where is the certificate hosted? when does the verification occurs? -


i quite confused here:

i use dnsmadeeasy manage dns. have 2 apps.

1and1 sell ssl certificate, automated setup works when 1 uses services dns also, say. support says should dnsmadeeasy should hosting our ssl certificate. have feeling not true, because https://example.com, dnsmadeeasy never involved.

questions:

  • when certificate querying occurs? before, after, or in parallel of dns resolution?
  • who hosting certificate? the dns provider? the server (accessible sitemap.xml @ root instance)? a third party?
  • to enlarge case, in general if have personal server fix ip, how can communicate through https valid certificate?
  • in case, how can way out of make https://subdomain.example.com work?

you right not believing 1and1 suggestion.

to answer questions:

  • when certificate querying occurs? before, after, or in parallel of dns resolution?

a client resolves domain name ip address first. dns resolution happens first.

  • who hosting certificate?

the server (in simplistic terms) hosts certificate.

when client wants connect site (via https) first establish secure connection ip address on port 443 (this why (without sni) can have 1 ssl certificate per ip address). part of process (which called handshake) client can specify server name (so-called server name extension) - domain name of site. useful if have ssl certificate valid multiple domains.

a good/detailed explanation how works can found here http://www.moserware.com/2009/06/first-few-milliseconds-of-https.html

  • if have personal server fix ip, how can communicate through https valid certificate?

your server need able respond on port 443 , have/host ssl certificate domain resolves ip address.

you need purchase certificate subdomain.example.com , install on wordpress server. in hosted solution yours have 2 options:

  1. buy ssl certificate via provider (1and1 in case) - simpler option, configure you.

  2. buy ssl certificate yourself. here need login 1and1/wordpress management interface , generate csr (essentially certificate request). purchase ssl certificate using csr , can install via same management interface. process similar this: http://wpengine.com/support/add-ssl-site/


Comments

Popular posts from this blog

searchKeyword not working in AngularJS filter -

sequelize.js - Sequelize: sort by enum cases -

user interface - how to replace an ongoing process of image capture from another process call over the same ImageLabel in python's GUI TKinter -