Install SSL Certificate on FHIR Server

[brajesh kumar]

Hi,

I want to install ssl certificate on FHIR server. Server's host name is fhir.safetylabs.org.

According to this url: https://github.com/smart-on-fhir/installer and TLS section, if i enable these settings in custom_settings.yml 

services_host: "fhir.safetylabs.org"

#use_custom_ssl_certificates: true

#custom_ssl_certificates_path: examples/certificates

#use_secure_http: true

set path of ssl certificate in (custom_ssl_certificates_path) purchased by

https://www.entrust.com/ssl-certificates/?campaignid=762191188&adgroupid=42965627991&feeditemid=&cikw=%2Bpurchase%20%2Bssl%20%2Bcertificates&MatchType=b&device=c&ci_source=paid&loc_physical_ms=20458&loc_interest_ms=2124&network=g&devicemodel=&adposition=1t1&gclid=CjwKEAjwja_JBRD8idHpxaz0t3wSJAB4rXW5PYEudV-jG0KAe0jAiAdWqOMZLa4CnRAk2_veSz68_hoCApPw_wcB

and run sudo ansible-playbook -c local -i 'localhost,' -vvvv site.yml

My question is, would i be able to browse url using https, like https://fhir.safetylabs.org/api/smartdstu2/open/Observation

Can i purchase host name with ip address and port number? For example, I want to get following hostnames.

https://fhir.dstu2.safetylabs.org -> https://45.56.84.134:9070

https://fhir.sandbox.safetylabs.org -> https://45.56.84.134:9090

https://fhir.auth.safetylabs.org -> https://45.56.84.134:9080

https://fhir.apps.safetylabs.org -> https://45.56.84.134:9093

I am not done ssl implementation ever, so please help.

Thanks,

Brajesh

[Travis Cummings]

You must have a unique certificate for each of your 4 host names:

fhir.dstu2.safetylabs.org

fhir.sandbox.safetylabs.org

fhir.auth.safetylabs.org

fhir.apps.safetylabs.org

Or a wildcard certificate:

*.safetylabs.org

But a wildcard certificate only covers a single subdomain.  In that case you would reverse the order to be:

*.fhir.safetylabs.org

Or collapse the subdomain to be:

*.safetylabs.org

Ex: fhir-dstu2.safetylabs.org

Travis

https://fhir.dstu2.safetylabs.org -> https://45.56.84.134:9070

https://fhir.sandbox.safetylabs.org -> https://45.56.84.134:9090

https://fhir.auth.safetylabs.org -> https://45.56.84.134:9080

https://fhir.apps.safetylabs.org -> https://45.56.84.134:9093

Sent from my iPhone

--
You received this message because you are subscribed to the Google Groups "SMART on FHIR" group.
To unsubscribe from this group and stop receiving emails from it, send an email to smart-on-fhi...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.