Opened 16 years ago

Closed 15 years ago

#55 closed defect (fixed)

certificates on *.scripts.mit.edu as a separate IP address

Reported by: price Owned by: quentin
Priority: major Milestone:
Component: web Keywords:
Cc:

Description

(Split out from #48.)

Currently lockername.scripts.mit.edu gives a certificate error on IE 6 and Safari. The problem is that (modulo the recent SNI extension) the HTTPS protocol doesn’t support sending the virtual host name before the server must decide which certificate to present. In #48, Joe installed SNI, which FF 2 and IE 7 understand.

To accomplish the highly desirable #17, we need to support these other browsers; many scripts users will not consider it acceptable that their viewers on IE 6 and Safari get certificate errors. To do this, we can move scripts.mit.edu to a separate IP from *.scripts.mit.edu, so that the server knows which certificate to present based on the IP.

Change History (1)

comment:1 Changed 15 years ago by quentin

  • Resolution set to fixed
  • Status changed from new to closed

We finished this change on Feb 9. scripts.mit.edu now has a new IP address, 18.181.0.43, and the old 18.181.0.46 is still used for *.scripts.

Note: See TracTickets for help on using tickets.