up vote 3 down vote favorite
1
share [g+] share [fb]

Is it possible to have a SSL certificate for access directly to an IP, and not through a hostname? Eg, can I purchase an SSL certificate to make https://1.2.3.4/ work without giving a security warning?

link|improve this question
85% accept rate
feedback

2 Answers

up vote 1 down vote accepted

Yes, it is possible and several CAs will issue certificates to IP addresses. You will somehow have to demonstrate that you own or control the IP address.

link|improve this answer
feedback
up vote 3 down vote

I haven't actually tried this, but I assume that if you create a Certificate Signing Request (CSR) with the Common name of 1.2.3.4 it should at least generate.

Whether or not a web browser will accept it is a different story, but if you're accessing the resources via something other than a web browser then your milage may vary.

link|improve this answer
1  
I can confirm it's possible, and will be accepted. Now getting a real CA to rubberstamp the CSR, that's going to be another story. I don't know of any CA that will do it. – Chris S♦ Apr 15 '10 at 1:07
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.