1: adding SSL certs to an external domain
Posted by stuartmitch on 22/01/19 10:26

Hi there,

I read on another post that "Voice will automatically register a SSL certificate for your site once you add it, so it will still be fully secure and use https."

I have applied the thornboroughparish.org.uk domain to www.bucksvoice.net/tpc/ but have no SSL on the former.  Please help!

Thanks!

2: Re: adding SSL certs to an external domain (response to 1)
Posted by Voice Admin on 22/01/19 10:43

Yes - it will - however you need to set up the DNS for your domain so it points directly at the bucksvoice server, rather than being a web forward.

At the moment www.thornboroughparish.org.uk is forwarding requests to www.bucksvoice.net/tpc/ - and in this situation it is up to the company doing the fowarding to provide https if appropriate.

Once you update the DNS settings then the Voice system will automatically spot this and will be able to register a SSL certificate for you. It'll then automatically redirect everyone to the https domain.

Since your site is on bucksvoice you should update the DNS to have an A record pointing to 5.44.25.69

Thanks

Joe

3: Re: adding SSL certs to an external domain (response to 2)
Posted by stuartmitch on 22/01/19 10:58

Hi Joe,

Thanks for that... but I got a bit lost!  :)  I am using 123-Reg (which I know you do too)... which is currently configured as follows:

  • 302 redirect
  • framed web forwarding
  • forwarding to http://46.20.114.99/tpc 

...after lots of playig around this seemed to give me what I need (thornboroughparish.org.uk in the address bar, a path for the favicon) so what changes do I need to make to get an SSL cert?  Is it 301 redirect to 5.44.25.69 instead?

Sorry... this is just beyond what I understand!

Thanks!

4: Re: adding SSL certs to an external domain (response to 3)
Posted by Voice Admin on 22/01/19 11:08

You don't want any sort of web forwarding or redirecting at all.

You need to turn off web redirect, and use the DNS Management panel to set up an A record pointing to 5.44.25.69.

123-reg provide some instructions here: https://www.123-reg.co.uk/support/domains/domain-name-server-dns-management-guide/

See page 5, about setting an A record.

Once you set up the DNS record and disable the web redirecing then you'll probably find that there'll be a delay (a few hours) where the domain doesn't work. This is normal so don't panic!

Thanks

Joe

5: Re: adding SSL certs to an external domain (response to 4)
Posted by Voice Admin on 22/01/19 11:18

Actually - if you want to use your domain as www.thornboroughparish.org.uk and don't mind about using it without the www bit, then setting up a CNAME (page 6 of the 123.reg help document) is probably better.

In this case, you would set the hostname as "www" and the destination as "www.bucksvoice.net." (note the full stop at the end).

An A record for www would also work.

In their A record example they use a hostname of @ which means the domain without any www part on it. So you only need to do this if you want to use thornboroughparish.org.uk without www on it for your website.

Once you've set it all up then you can reply on here and I'll check that it looks correct.

Thanks

Joe

6: Re: adding SSL certs to an external domain (response to 4)
Posted by stuartmitch on 22/01/19 11:28

OK great, so I have removed all web forwarding and set the www A name record to 5.44.25.69. 

I assume that's all I need but (for belt and braces) I also set the @ A name to the same IP address.

I have a couple of legacy domains (thornboroughparish.co.uk and thornboroughvillage.co.uk) - am I OK to set these up to web forward to thornboroughparish.org.uk or shall I do the same A name record on those?

Thanks for all your help and patience with me Joe!

7: Re: adding SSL certs to an external domain (response to 6)
Posted by Voice Admin on 22/01/19 11:52

Great - those look correct - bucksvoice will notice the change after a few hours and everything will then work correctly with https.

I would update the DNS on the other domains too - that way any visitors and search engines will automatically be redirected to the org.uk domain.

Thanks

Joe

8: Re: adding SSL certs to an external domain (response to 7)
Posted by stuartmitch on 31/01/19 14:52

Hi Joe,

Sorry to dig up an old thread... but is there any way to add non-www to the SSL cert please?  I would like https://thornboroughparish.org.uk to work as well as https://www.thornboroughparish.org.uk because... well, it's 2019 and people don't really use www's any more.  Tongue Out 

Thanks!

9: Re: adding SSL certs to an external domain (response to 8)
Posted by Voice Admin on 31/01/19 15:32

It's debatable whether people really don't use www. But yeah, Voice will work fine either way.

Just make sure you set up an A record for the bare domain (usually indicated as an @ as the hostname in the DNS settings) pointing to the e-voice IP address. And ensure the domain without the www is added to your site settings.

Cheers

Joe

10: Re: adding SSL certs to an external domain (response to 9)
Posted by stuartmitch on 02/02/19 14:09

Hi Joe,

I've messed up my settings in an attempt to get both www. and non-www. working.  Now neither is working.  Cry

I have:

  • @              A              5.44.25.69
  • www        A              5.44.25.69
  • www       CNAME    www.bucksvoice.net.

...(plus a bunch of other records e.g. MX for mail) but it simply isn't resolving.

As my old domains are due to retire I simply put a 301 redirect from them (thornboroughparish.co.uk and thornboroughvillage.co.uk) to https://www.thornboroughparish.org.uk but (obviously) that's not working either.  Seems you can't use the old http://bucksvoice.net/tpc address any more too!

HELP!  (sorry)

11: Re: adding SSL certs to an external domain (response to 10)
Posted by Voice Admin on 02/02/19 20:26

the IP address you need for bucksvoice is 46.20.114.99, and not 5.44.25.69.

I don't know why the Site Domain settings page on bucksvoice is displaying that IP address, as it's certainly not the correct one.

If you change those entries to 46.20.114.99 then it should work fine!

(And then I'll see if I can see why it's showing that wrong address on the settings page!!)

Thanks (and sorry for the confusion!)

Joe

12: Re: adding SSL certs to an external domain (response to 11)
Posted by stuartmitch on 02/02/19 21:10

 

Er... you almost certainly said that below and (during tweaking) i messed it up.

I've put it back to 46.20.114.99 on both and will wait for changes to filter though... THANKS!

13: Re: adding SSL certs to an external domain (response to 12)
Posted by stuartmitch on 02/02/19 21:12

Yeah... working already.  Cool

All the best.