MojoPortal and certificates

Post here for help with installing or upgrading mojoPortal pre-compiled release packages. When posting in this forum, please provide all relevant details. You may also want to review the installation or upgrading documentation.

If you have questions about using the source code or working with mojoPortal in Visual Studio, please post in the Developer forum.

Post here for help with installation of mojoPortal pre-compiled release packages

When posting in this forum, please try to provide as many relevant details as possible. Particularly the following:

  • What operating system were you running when the bug appeared?
  • What database platform is your site using?
  • What version of mojoPortal are you running?
  • What version of .NET do you use?
  • What steps are necessary to reproduce the issue? Compare expected results vs actual results.

You may also want to review the installation or upgrading documentation.

If you have questions about using the source code or working with mojoPortal in Visual Studio, please post in the Developer forum.

This thread is closed to new posts. You must sign in to post in the forums.
12/5/2014 1:52:55 AM
Gravatar
Total Posts 83

MojoPortal and certificates

Hi,

We have a MojoPortal website, this website only got 1 page that is not protected my login(username/password). To protect the content we now need to implement a certificate(SSL), this is done at our host to pay a specific price / year. The question is if there is any thing we should know about MojoPortal and certificates before we buy this certificate?

Not only the username/password is used but also the upload and download of files. Its important that also this part is protected by the SSL, could this be a problem?

BestRegards

12/5/2014 7:42:54 AM
Gravatar
Total Posts 18439

Re: MojoPortal and certificates

should be fine so long as it is a real ssl certificate that matches your domain name and not some shared ssl scheme that some hosts offer where you have to use a shared domain for secure pages that is different from the site domain, that kind of funky thing won't work.

once it is working I would go to site settings and check the box to require ssl on all pages. since relative urls are used it should then also use ssl for file uploads and downloads

see also Use SSL, and Configuring SSL in mojoPortal

note for example that we use ssl on this site and our demo site

12/8/2014 3:57:36 AM
Gravatar
Total Posts 83

Re: MojoPortal and certificates

Thanks, yes, I have read those links and it looks to be strait forward.

In this case the host will order a specific certificate for our domain to Thawte, this will be installed on a shared server(multiple other websites on the same server). From what I read, this is no problem, right?

12/8/2014 7:21:07 AM
Gravatar
Total Posts 18439

Re: MojoPortal and certificates

if you mean a wild card certificate that will be used for multiple hostname sites within the same domain, that should work fine, we use the same wild card cert for this site and demo.mojoportal.com.

 

12/8/2014 7:26:31 AM
Gravatar
Total Posts 83

Re: MojoPortal and certificates

No, from what I understand my host the certificate will be specific to www or just http. Will this works? And what should be the best choise? www?

12/8/2014 7:38:42 AM
Gravatar
Total Posts 18439

Re: MojoPortal and certificates

the only concern with multiple ssl certificates is that you can only bind one certificate to a given ip address. with a wildcard domain cert each host within the domain can use the same ip address and same certificate. But if the sites each need different certificates then they each need their own ip address as well.

whether you prefer somedomain or www.somedomain is entirely up to you but it must match the certificate and it is probably best not to change it for already established sites. On this site we have a wildcard domain that supports both mojoportal.com or www.mojoportal.com, it matches both since it is a wildcard but we force it to www if a request without www comes in. But if it were not a wildcard then the site would not be accessible using any variant that does not match the certificate, that is if the certificate is specifically for www.somedomain.com and a request for https://somedomain.com comes in IIS cannot serve the page because it does not have a certificate that matches the request. probably in that case a cname dns record can point somedomain.com to www.somedomain.com to solve it

12/8/2014 9:45:18 AM
Gravatar
Total Posts 83

Re: MojoPortal and certificates

Thanks! I do however think that I dont have a choise in this case, I need to specify the exact URL so it will be with the www.

Im still not sure if the certificate offered by my host will work with MojoPortal? This is what thay say :

SSL certificate of type Thawtes SSL 123 including priviate ipv4-address. Its not possible to change hostname after the order have been placed and it will be paid per year. It is only possible to choose www or no www, no wildcard.

The ordered certificate will be installed on to the server where my webpage is installed. This is a multi host environment(many other webpage on the same server) but this certificate will be bought and used only for one specific mojoportal webpage.

Will this work?

12/8/2014 10:10:47 AM
Gravatar
Total Posts 18439

Re: MojoPortal and certificates

so they are saying the don't offer wild card certificate, that means you must order your certificate to exactly match your desired host name

please understand that nothing about mojoportal is connected to or can affect your ssl certificate, that is all handled by IIS, not by mojoportal code. all mojoportal can do or does is to detect the setting you provide telling it whether ssl is available and if it is then it can detect a request that is not using https and redirect it to use https. other than that nothing in mojoportal is doing anything directly at the protocol level, that is all handled by IIS web server. So mojoPortal is no different than any other web application, ssl is not handled at the web application level other than redirect logic. There is no concept of a certificate that will or won't work with mojoPortal, it is separate from mojoPortal, we don't code against the protocol level, we don't do the encrypting of traffic between the web server and the web browser using the certificate, that is all the web server responsibility.

12/10/2014 4:30:21 AM
Gravatar
Total Posts 83

Re: MojoPortal and certificates

Thank! One last question, is it possible to redirect http to www with mojoportal? I asking becouse I will only get a certificate for the www version of the URL.

12/10/2014 7:35:27 AM
Gravatar
Total Posts 18439

Re: MojoPortal and certificates

I posted a link about forcing the preferred host name in my previous answers on this thread.

1/9/2015 9:29:27 AM
Gravatar
Total Posts 83

Re: MojoPortal and certificates

Works great BUT could I also add the https:// in the beginning of my www in this AllowForcingPreferredHostName? Right now it seems to only rederict from http://mywebpage.se to http://www.mywebpage.se.

I could try but I read that if it is wrong I will have to revert it with SQL script.

You must sign in to post in the forums. This thread is closed to new posts.