Re: adding SSL for hosting subdomain only

[Pete Helgren <pete@xxxxxxxxxx>]

Depends upon the primary site certificate.  If it's www.xyz.com when 
you'll need a certificate specifically for order.xyz.com  If the 
certificate is a wildcard, then *.xyz.com will work for order.xyz.com.

I used a reverse proxy for all of my sites so the "main" Apache config 
file handles the SSL and then passes all the traffic back to the 
instance serving the content.  It's all dynamic but with the reverse 
proxy handing the traffic back, no changes are needed to the instance 
serving content.

Pete Helgren
www.petesworkshop.com
GIAC Secure Software Programmer-Java
AWS Certified Cloud Practitioner
Twitter - Sys_i_Geek  IBM_i_Geek

On 4/3/2021 10:51 PM, Jim Franz wrote:
> Primary website (domain name) hosted elsewhere. Order entry pages hosted on
> i. The primary site recently added ssl, but the order.xyz.com (Apache
> webserver) on i not set up for ssl. Do i need the certificate from primary
> site? They are as clueless as i am about this, but googling about
> subdomains seems to say yes.
>
> DCM long ago set up and has entries needed for sftp.
>
> A second question - since subdomain site has many pages, all dynamic, has
> anyone used the Apache rewrite engine so as to not fix every http reference
> into https?
>
> Jim