Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it possible to have a SSL certificate for access directly to an IP, and not through a hostname? Eg, can I purchase an SSL certificate to make https://1.2.3.4/ work without giving a security warning?

share|improve this question
add comment

2 Answers

up vote 1 down vote accepted

Yes, it is possible and several CAs will issue certificates to IP addresses. You will somehow have to demonstrate that you own or control the IP address.

share|improve this answer
add comment

I haven't actually tried this, but I assume that if you create a Certificate Signing Request (CSR) with the Common name of 1.2.3.4 it should at least generate.

Whether or not a web browser will accept it is a different story, but if you're accessing the resources via something other than a web browser then your milage may vary.

share|improve this answer
1  
I can confirm it's possible, and will be accepted. Now getting a real CA to rubberstamp the CSR, that's going to be another story. I don't know of any CA that will do it. –  Chris S Apr 15 '10 at 1:07
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.