Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm setting up a web server that has an internal IP address and an external IP address.

e.g. Browsers on the network request mysite.example.com and get 192.168.200
Browsers outside the network request mysite.example.com and get 74.125.127.103

I want to buy and install a certificate for SSL. How can I set this up so that both internal and external traffic is secured with a certificate? Do I need more than one certificate? Is it possible for the certificate to be valid for both IP addresses?

share|improve this question
    
i'm sorry but why would you want the SSL on your internal network ? –  Prix Aug 6 '10 at 16:59
2  
@Prix I'm sorry but why wouldn't you want SSL on an internal network? –  Zypher Aug 6 '10 at 19:00
    
because it is a internal network ? are you expecting your employeers to be running things like wireshark or w/e and steal your data ? –  Prix Aug 6 '10 at 20:04
1  
@Prix: Nope. I'd expect pen-testers and intruders to be running things like wireshark or w/e (whatever that is). The fact that employees can't usefully do so either is merely a side benefit. –  Slartibartfast Aug 7 '10 at 17:36
1  
@Prix, I don't want passwords or sensitive data to be passed in clear text - ever. –  Lance Fisher Aug 9 '10 at 22:05

1 Answer 1

up vote 7 down vote accepted

The certificate is checked against the domain name, not the ip. So if you set your webserver to listen for ssl connections on both IPs for the same domain name then you are fine.

share|improve this answer
1  
I would say that the implicit answer here is: Ensure that whatever domain name the certificate is for resolves to the appropriate IP address from internal and external hosts. You can do this by running internally a DNS server for your internal hosts that essentially overrides the DNS system available externally. –  Slartibartfast Aug 7 '10 at 17:38

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.