Hello Kevin,
"Duffey, Kevin" wrote:
> Hi,
>
> Is there any news on the ability to get a Verisign certificate yet? We are
> ready to order one.
The ability has been there for a long time, however, it has not been specified
exactly what cert to get. A short guide is in the documentation.
> Also, is Orion now "stable" in the SSL/Clustering..I
> think Magnus said version 1.3.8 would be, but I am not sure if that is a
> completely stable build like 1.2.9? If not, when can we expect a stable
> build good for deployment that supports the clustering and SSL stuff?
>
1.3.8 is our current stable release
>
> Lastly, do I have to do any special stuff for SSL? Other than getting the
> certificate to work, when a request comes in as HTTPS, does Orion do the
> work for me like IIS does for us now? Or do I have to do as someone
> suggested, make a special web-app on the SSL port and any page that needs to
> be secure has to run in that web-app? If so, why is it this way? I would
> think the web-server would handle this for me, and I wouldn't need any
> special port/web-app to handle SSL.
>
HTTPS listens to another port than HTTP does. The default is that HTTPS listens
to 443 while 80 is used for HTTP, so the URLs https://www.foo.com and
http://www.foo.com access different ports. If you run HTTPS on port 80 you need
to access it through https://www.foo.com:80.
You do not run HTTPS and HTTP on the same port in either Orion or IIS.
Regards,
Karl Avedal
