From 4e970d46826d8b9456c5de02e7dc7358f504fd2e Mon Sep 17 00:00:00 2001 From: Brian Cunnie Date: Sat, 29 Aug 2015 07:32:37 -0700 Subject: [PATCH] Better content. --- document_root/index.html | 58 +++++++++++++++++++++------------------- 1 file changed, 31 insertions(+), 27 deletions(-) diff --git a/document_root/index.html b/document_root/index.html index a70de7f..96cab2f 100644 --- a/document_root/index.html +++ b/document_root/index.html @@ -45,8 +45,8 @@ come first in the head; any other head content must come *after* these tags --> @@ -59,59 +59,63 @@ come first in the head; any other head content must come *after* these tags -->

sslip.io

Turn your red lock into a green lock!


-
-
-

 

-

Free wildcard DNS and Valid SSL Certificates for Everyone.

-

sslip.io combines a wildcard DNS matched with a valid wildcard SSL certificate and key to provide trusted SSL connections.

-

How it works -

-

Your server's fully-qualified domain name (FQDN) is a mash-up of your server's IP address and the sslip.io domain. Here are some examples:

+
+
+
+

 

+
+

What is it?

+

sslip.io is a special DNS domain (sslip.io) that maps crafted hostnames +to IP addresses (e.g. 192-168-0-1.sslip.io maps to IP address 192.168.0.1). Combined +with a valid wildcard SSL certificate, it provides trusted SSL connections to your webserver, +your docker registry, etc....

+

How do I use it? +

+

First, use your server's IP address to determine its sslip.io hostname.

+

Your server's sslip.io is a mash-up of your server's IP address and the sslip.io domain. Here are some examples:

- - + + - + - + - + - +
FQDNResolves to this -
IP Address		Server's IP Addresssslip.io Hostname
52-0-56-137.sslip.io 52.0.56.13752-0-56-137.sslip.io
127-0-0-1.sslip.io 127.0.0.1127-0-0-1.sslip.io
www-10-1-1-2.sslip.io 10.1.1.2www-10-1-1-2.sslip.io
console-192-168-0-1.sslip.io 192.168.0.1console-192-168-0-1.sslip.io

-

Install the SSL key and certificate on your webserver.

+

Note that in the last two examples we prepended additional +information to the hostname, i.e. "www-" and "console-", respectively. This allows sslip.io +to work with name-based +virtual hosting.

+

Second, download sslip.io's SSL certificate and key from GitHub

Download the SSL key (sslip.io.key.pem) and wildcard SSL certificate chain (sslip.io.chained.crt.pem) from GitHub.

+

Third, configure webserver with your sslip.io hostname, SSL certificate, and SSL key

-

Configure your webserver. Set the name to sslip.io subdomain and point to the certificate. Here is a sample nginx.conf snippet:

+ +

Configure your webserver. Set the server name to sslip.io hostname, and configure the SSL portion to use the key and certificate downloaded from GitHub. Here is a sample from sslip.io's webserver's nginx.conf (modified for clarity):

 server {
-  server_name 52-0-56-137.sslip.io;
+  server_name         52-0-56-137.sslip.io;
   listen              443 ssl;
   ssl_certificate     /etc/ssl/sslip.io.chained.crt.pem;
   ssl_certificate_key /etc/ssl/sslip.io.key.pem;
-}
-

- Technical limitation: All FQDNs must be a one-level deep subdomain on the sslip.io domain for proper SSL validation. -

-

For example: www.127-0-0-1.sslip.io will not work, but www-127-0-0-1.sslip.io will. This is a limitation - of the wildcard SSL certificate, not a limitation of the sslip.io DNS server; e.g. when queried with the hostname "sf.ca.usa.172-16-1.2.sslip.io", the DNS server will return an IP address of 172.16.1.12).

-