| Software Secret Weapons™ |
Simple Way To Test SSL Certificates And DNS For Web Applications Before Deployment posted by Pavel Simakov on 2006-03-30 11:43:24 under Smoke & Mirrors
|
||||
|
Do you run several web sites with SSL certificates and multiple domain names? Do you test you web applications before deployment? Or you just hope that it all works after heroic system administrator puts the fix on the live server... Wouldn't it be wonderful if you could fully test your web sites in the development shop before deployment to production! Test all of it: virtual hosts, domain names, and SSL certificates? This article teaches you how to do it.
Why it is difficult to test web applications in house? Some of the features, like SSL certificates, won’t work on the test web site. Browser will complain that certificate is invalid. Many automation tools will refuse to test the site for the same reason. This happens because domain name in the certificate (www.mybigapp.com) does not match the server name typed into the browser (192.168.1.25, testmachine1). Many other features of your web site that rely on DSN will not work properly as well. DNS is involved in more places then you think. Any place that uses domain name is in jeopardy:
All of these problems make it difficult, if not impossible, to test web applications in your office before they are deployed in production.
Use DNS server to help your testing But DNS can be effectively used for testing web applications. You can install a separate DNS server on you local network specifically for testing. This DNS server should be configured to temporarily point domain name www.mybigapp.com to your office test server at 192.168.1.25. From this point on, your testing team can use www.mybigapp.com name and will arrive to the test server, instead of production. All SSL certificates will now work properly - domain name in the browser matches domain name in the certificate.
Walkthroughs
This is how you would access web sites on the production and test servers:
Comments (2) Leave a comment |
|
||||
| Copyright © 2004-2007 by Pavel Simakov |
|
Comment by Greg — October 28, 2007 @ 9:37 am
Great write up! How about a linux version?
Comment by kishore — January 31, 2008 @ 6:17 am
thanks, your info is very good, please send me relavent articles regarding SSL and secuirity testing