Download Control Panel PDF Manual

174
Data Transfer Security
Now the site is available both at the non-secured second level domain name (e.g.
http://example.com) and at the secured third level domain alias (e.g.
https://example.victor.psoft). Note that Shared SSL certificates work only
within one domain level, i.e. for user1.example.com and not for
www.user1.example.com. In the example above, the certificate will not work for
www.example.victor.psoft, and your visitors will get the warning: “The name on the security
certificate does not match the name of the site”.
Note: When designing your pages set any internal links to images or frames as <a
href=’https://user.domain.com/images/example.jpg’> or simply <a
href=’/images/example.jpg’>. If you use the <a href=’http://...> link,
your visitors will get the message: “The page contains both secure and non-secure items”.
This is not much of a problem in terms of security, since visitors may simply choose the
“do not display non-secure items” option, but no graphics will be displayed.
Renewing Permanent Certificates
If your certificate is about to expire, renew it:
1. Find the certificate signing request (CSR) that you saved when
acquiring the old certificate.
2. Go to your certificate authority and choose to renew the certificate.
When requested, enter the CSR.
3. After the permanent SSL Certificate has been generated, save it to a
secure location.
4. Select Domain info in the Domain Settings menu.
5. Go to the Web Service page and click the Edit icon next to the SSL Support.
6. Enter the corresponding certificate into the box of the form that opens: