Take the 2-minute tour ×
Salesforce Stack Exchange is a question and answer site for Salesforce administrators, implementation experts, developers and anybody in-between. It's 100% free, no registration required.

We have a force.com site which has a simple lead form. We want to use a custom domain name like https://www.companyname.com/leadform as our url which we can use for marketing. I know we can register a custom domain and point the cname record to the force.com site url. But is it possible for me to have a ssl certification on companyname.com point to salesforce site page? Has any body come up with a solution for secure pages using custom domain like https://www.companyname.com/leadform as an example? Buyan

share|improve this question
    
Here's the Idea: Private SSL url's for Force.com Sites –  Peter Knolle Mar 24 at 23:40
add comment

4 Answers

up vote 5 down vote accepted

Bunyan, take a look at the Sites FAQ which says the following:

Q: Does it support HTTPS custom URLs (not force.com URLs) with our own certificate?

A: Not at this time

and

Q: Can i specify my own SSL certificate if i use a CNAME to brand my URL

A: SSL certificates specify an IP address and at the current time we do not provide a feature to host SSL certificates for sites other than the default domain force.com.

From the above, unless something has changed, I'd conclude that at this time it's not possible to do what you desire.

share|improve this answer
    
Thanks for your quick confirmation on this. –  buyan kumar Dec 10 '13 at 16:39
add comment

To the contrary of the linked documentation from @crmprogdev, as of at least August 2013 Salesforce does support this scenario.

SFDC Help: Adding a Domain

To associate certificates with a domain: Contact salesforce.com

A couple of key points:

  • You must use a CA-Signed certificate
  • You must use a CSR generated by Salesforce
  • The certificate must be 2048 bits in length


Image


Answers to the questions below

How do I associate our domain which www.companyname.com managed by our infrastructure team to salesforce domain?

This is done using your DNS A or CNAME records. Salesforce can provide direction on how the DNS records should be configured.

Are you telling me that if we have a CA signed certificate for our domain, we can easily upload this to salesforce and have force.com site pages display with a custom SSL url like https:///www.mycompany.com/contact as an example?

A URL like this one: https:///www.mycompany.com/contact could be handled with the Site.UrlRewriter interface but if you don't want to implement a UrlRewriter, your page URLs will take on the normal VF path of https:///www.mycompany.com/apex/contact (where you have a VF page named contact).

Salesforce provides tools for managing certificates within your org. You would use these tools to generate a Certificate Signing Request (CSR) and have that request signed by the CA and then you can upload the certificate into your org.

Can you please explain how this would help to display custom domains with https on force.com sites please?

Per that help document, you can contact Salesforce and they can associate your force.com site with the SSL certificate which you uploaded. After that is complete, your force.com site will be available using your SSL certificate via your custom web address defined on your site.

share|improve this answer
    
I believe the issue is that forms of that type get processed through Force.com and aren't always seen as going through the registered Domain. I agree that support for certificates has definitely been available for quite some time. As I understand it, it just "falls down" in certain situations. I also noted that things may have changed since the WIKI was published. I hope they have! ;) –  crmprogdev Dec 10 '13 at 17:54
1  
Domain Management was a Summer '13 feature - so this ability was likely added at that point. This ability to add a custom SSL certificate to a domain required herculean string-pulling prior to Summer '13 but this is in the docs and should work as described. –  Mark Pond Dec 10 '13 at 18:11
    
@MarkPond Hi Mark , Thanks for your reply. Couple of questions. 1. How do I associate our domain which www.companyname.com managed by our infrastructure team to salesforce domain? 2. Are you telling me that is we have a CA signed certificate for our domain, we can easily upload this to salesforce and have force.com site pages display with a custom ssl url like https:///www.mycompany.com/contact as an example? 3. Can you please explain how this would help to display custom domains with https on force.com sites please? Buyan –  buyan kumar Dec 11 '13 at 19:24
1  
I just came across a post on the Salesforce success site about this - from Joe Morse of Salesforce "This was true for a very limited pilot that ran until late last year (2013), but the product team is evaluating ways to make this work in production for (Safe Harbor) later this year. " –  Bob Buzzard Jan 31 at 8:49
add comment

Private SSL certs don't work. We've been on the road once - did everything as instructed by document: get CSR from SF, cert signed by a CA, uploaded the cert. In the end, it didn't do a thing for the site intended (with the cert URL configured as primary btw and CNAME rediret set up). After a 3 1/2 months case, SF finally said, "nope, feature wouldn't be production available until at least Winter '14". The exact quote from the case owenr was

I just had word with the PM for this feature. They mentioned that the this pilot feature is in hold. They are shooting for the Winter release (safe harbor) to go on a GA ( generally available feature). When this feature becomes public your org will be able to hold the valid SSL certificates for the sites.

Now Spring '14 is almost out, and the feature is still nowhere to be found.

share|improve this answer
add comment

For completeness sake...

create an AWS account and run ngnix in a reverse proxy configuration. Setup your certificate and domain against that IP address and you can then forward website requests to salesforce using SSL and your own domain. It goes against the no hardware stance but since salesforce is a multi-tenant environment and SSL essentially requires a single IP/server per certificate they are going to be hard-pressed to support a large number of SSL custom domains as a general feature.

share|improve this answer
    
If going with AWS, what do you think about using CloudFront? It supports all HTTP verbs... –  user320 Mar 24 at 23:40
    
cloudfront is for putting static content closer to users. I should clarify the above statement to say, "create an AWS EC2 account". You need a host the reverse proxy. you could possibly put cloudfront in front of EC2 but it doesn't seem necessary. –  ebt Mar 26 at 20:04
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.