#1  
Old 16th April 2010, 19:27
tini tini is offline
Junior Member
 
Join Date: Nov 2006
Posts: 20
Thanks: 0
Thanked 1 Time in 1 Post
Question SSL on multiple vhosts?

Hi there

Is it possible to install SSL certificates in multiple sites when ISPConfig is running on only one IP?

Thank you
Reply With Quote
Sponsored Links
  #2  
Old 16th April 2010, 22:21
yoplait yoplait is offline
Senior Member
 
Join Date: Dec 2009
Posts: 143
Thanks: 48
Thanked 13 Times in 10 Posts
Default

I think that yes, because ssl does just matter about the domain name, isn't it ?
Reply With Quote
  #3  
Old 17th April 2010, 18:42
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,735 Times in 2,571 Posts
Default

No, it's not possible - you need one IP per SSL vhost.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #4  
Old 17th April 2010, 21:36
yoplait yoplait is offline
Senior Member
 
Join Date: Dec 2009
Posts: 143
Thanks: 48
Thanked 13 Times in 10 Posts
Default

Ouch ! Sorry if I was wrong ! :S
Reply With Quote
  #5  
Old 25th April 2010, 20:32
yoplait yoplait is offline
Senior Member
 
Join Date: Dec 2009
Posts: 143
Thanks: 48
Thanked 13 Times in 10 Posts
Default

After searching about this subject, I think it is possible only if you do it on your own, by ssh, on the vhost file.
It depends your apache version, but newer are ok.

I think that page can help you too : http://en.gentoo-wiki.com/wiki/Apach..._Virtual_Hosts

Falko, tell me if I'm wrong ?
Reply With Quote
  #6  
Old 25th April 2010, 20:50
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,497
Thanks: 813
Thanked 5,263 Times in 4,127 Posts
Default

It depends on the browser and apache. If you use the latest apache and are able to ensure that all your users use only the latest browsers, e.g. in a corporate enviroment, then its possible. If some of your users use older browser versions which is normally the case on internet sites, ssl will fail for them. Thats the reasons why falko told you that its not possible and thats why we have not implemented this in ispconfig.

It is highly recommended to do ssl sites the traditional way by using one dedicated IP address per site.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #7  
Old 25th April 2010, 21:01
yoplait yoplait is offline
Senior Member
 
Join Date: Dec 2009
Posts: 143
Thanks: 48
Thanked 13 Times in 10 Posts
 
Default

Yes, I saw that two problems. For apache, the problem is at the admin side, so, it's not so much a problem, but for the browser, it's a real problem, and the link I add speak about that.
There's also the list of supported browser there : http://en.wikipedia.org/wiki/Server_Name_Indication

I saw that on unsupported browser, the "first website" is shown in place of the good one :
Quote:
Warning: If a user's browser does not support SNI then the first SSL site in the configuration file will be displayed. It is recommended that the first entry is to a page that informs the user what the server requires for use.
I think it really depends the importance of the SSL websites but thanks you for the precision about falko intention !
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Apache2 and multiple SSL configs and name based virtual hosting Creator1326 Server Operation 11 5th October 2010 19:28
SNI support? single ip, multiple SSL hosts id10t Developers' Forum 1 30th September 2009 09:35
SSL for virtual hosts on one certificate rbartz Tips/Tricks/Mods 8 20th November 2007 17:59
Multiple IP on same NIC, and EV SSL Cert MisterVlad Installation/Configuration 9 15th September 2007 10:55
SSL Multiple domains Randy Installation/Configuration 6 15th September 2006 15:01


All times are GMT +2. The time now is 11:59.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.