SSl Cert

Discussion in 'Installation/Configuration' started by planet_fox, Jan 6, 2007.

  1. planet_fox

    planet_fox Member

    As it is possible with ISP Config on for example several SSL certificate provides for each particular domain.

    or is it force-turn necessarily for each SSL certificat its own IP to have?
  2. vogelor

    vogelor ISPConfig Developer ISPConfig Developer

    SLL Problem

    it is a problem from SSL, that SSL needs a unique IP for EVERY Certificate. This means ONE IP <-> ONE SSL Domain. This is the standard (100% sure)

    i know, that there exists some (expensive) Certificates you can use on one shared IP. This means ONE IP <> MORE SSL Domains. But this is ONE Cetrificate which contains many "SSL-Domains" (not 100% sure, but i mean this is the case)
  3. planet_fox

    planet_fox Member

    How do I know several SSL order on a IP to bind?
  4. vogelor

    vogelor ISPConfig Developer ISPConfig Developer

    sorry, don't understand what you mean.
    Please tell in other words again. Thanks
  5. falko

    falko Super Moderator ISPConfig Developer

    You can have only one SSL web site per IP address, it's a limitation of the https protocol.
    If you need more than one SSL web site, you need additional IP addresses.
  6. vogelor

    vogelor ISPConfig Developer ISPConfig Developer

    sorry if i correct you, but i have read, that you can have 1 certificate with several domain-names at 1 IP! this is possible, but expensive
    (have a look at this it is called multi domain certificate) (sorry, only german)
  7. martinfst

    martinfst ISPConfig Developer ISPConfig Developer

    Yes, possible, but not supported by all browsers and not supported by all Certificate Authorities, so you're not able to buy such a certificate from any provider. And in general I have to say this is a bad idea. It bypasses the objective of SSL security to authenticate a website properly. Another restriction IIRC is that it's only for hostnames, so *.domain.tld is supported, not *.*.tld.
  8. vogelor

    vogelor ISPConfig Developer ISPConfig Developer

    that's my oppinion to. i would NEVER use it. but it is (under some circumstances) possible :D

Share This Page