Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I run a web server that hosts three different domains using named virtual hosts. What do I need to do to enable SSL connections (https) to these domains?

EDIT: As Joel pointed out I forgot to state that I'm running Apache 2.0 on Scientific Linux which is just RHEL rebranded.

share|improve this question
    
What kind of server? What operating system? –  Joel Spolsky Apr 30 '09 at 18:59

3 Answers 3

The exact process is different depending on your platform and web server, but the basic process looks like (assuming you want a signed certificate that works for just about anyone visiting the site):

  1. Verify that the WHOIS information on the domain name is correct and that the administrative contact has a valid e-mail address.
  2. Assign the web site you want to secure its own dedicated IP address (only one SSL certificate can be assigned to an IP address).
  3. Generate a CSR (Certificate Signing Request) on the web server for the site that you plan to secure. The "common name" field should reflect the full domain name that the certificate will cover (i.e. www.example.com or secure.example.com).
  4. Purchase a certificate from a reputable SSL certificate provider, such as GoDaddy.
  5. Submit your CSR to the provider.
  6. The provider will then verify the request (GoDaddy sends an e-mail to the WHOIS administrative contact).
  7. Once verified, they will issue the signed certificate along with any intermediate certificates that might be required.
  8. Install the intermediate certificates first, per the instructions provided by your vendor.
  9. Install the signed certificate onto the server.
  10. Configure the web server to use the signed certificate.
  11. Finally, export and make a backup copy of the signed certificate (usually as a PFX file) in case you have to rebuild your web server.
share|improve this answer

In addition to the answers above, you also need separate IP addresses. One per SSL hostname.

share|improve this answer
    
Unless you have gone to the expense of getting a wildcard certificate –  Dave Cheney May 5 '09 at 17:13
1  
This only works if there is one domain. The problem still exists if there is more than one domain. –  Jauder Ho May 7 '09 at 9:23

As Joel (pretty much) said, depends on the web server and OS. Here are a number of walkthroughs from GoDaddy. The general process is:

  1. Generate a certificate signing request (CSR)
  2. Get an SSL certificate using this CSR
  3. Go back and install the certificate on your web site
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.