Mark, That does sound dangerous, always editing the hosts file... For a few of our sites (IIS 6), we exported the "www" production cert and imported it onto the "test" (in our case, the authoring site). The first time you hit the site, it give you a cert mismatch error, but once you accept it, you never see it again. With a limited group of developers hitting the test site, that isn't much of a problem This would allow us to use the "test' server as an emergency replacement using an F5 box or a DNS change. Some certificate authority sites like Digicert have wildcard certificates and other flexible options.
Gary Scullin SLEHS -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Mark Davis Sent: Wednesday, July 20, 2011 1:01 PM To: Houston ColdFusion Users' Group Subject: [houcfug] SSL cert setup Hey guys, There is a "bureaucrat" at my office trying to determine how we set up our environments and I am looking for some advice on other options. We have a test server (test.mycompany.com) and a production server (www.mycompany.com) and up until now, we have used a completely separate SSL cert on each box. As we are moving to all new hardware, we are being told that we need to have our environment setup exactly the same, which means using a single cert for both. This cert would be for www.mycompany.com and we have have to update our host file to get the our test server. To me, this seems ridiculous. When trying to test changes on the test server, the browser address bar would say www.mycompany.com and we would be relying on the current version of the host file to make sure we aren't really screwing up production data. I think having one cert for each domain, both set up the same, is a much better plan. Any thoughts or other ideas? Thanks Mark -- You received this message because you are subscribed to the "Houston ColdFusion Users' Group" discussion list. To unsubscribe, send email to [email protected] For more options, visit http://groups.google.com/group/houcfug?hl=en ColdBox training coming to Houston in July from the creator of ColdBox, Luis Majano! Use discount code "CFUG" for $175 off. More info at http://bit.ly/ColdBoxHouston +++++CONFIDENTIALITY NOTICE+++++ The information in this e-mail may be confidential and/or privileged. If you are not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any review, dissemination or copying of this e-mail and its attachments, if any, or the information contained herein is prohibited. If you have received this e-mail in error, please immediately notify the sender by return e-mail and delete this e-mail from your computer system. Thank you. -- You received this message because you are subscribed to the "Houston ColdFusion Users' Group" discussion list. To unsubscribe, send email to [email protected] For more options, visit http://groups.google.com/group/houcfug?hl=en ColdBox training coming to Houston in July from the creator of ColdBox, Luis Majano! Use discount code "CFUG" for $175 off. More info at http://bit.ly/ColdBoxHouston
