Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Possible Duplicate:
Multiple SSL domains on the same IP address and same port?

For example let's say I want 3 different domains, but it's all the same directory and IP and port numbers. However they must get the proper SSL for the domain they chose, naturally. Is this possible? How would I configure it as such? Will the request know which site to go to in order to have the proper SSL for that domain?

share|improve this question

marked as duplicate by Mark Henderson Mar 10 '11 at 21:47

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

With SSL negotiation and certificate checking is done before the HTTP request with a Host header is sent. There is no way to serve a different certificate based on the Host header. You may be able to get a single certificate that supports multiple names either through a wildcard or SAN.

Newer versions of IIS support TLS with SNI which would also permit the server to use the correct certificate. This is only supported on recent web servers and browsers though. If you still have lots of users connecting with older browsers IE6, or you cannot upgrade to the newest IIS then SNI is not an option.

share|improve this answer
+1. SAN + SNI is exactly what this guy needs. However, it looks like XP SP3 gives IE6 the ability. – Christopher Karel Mar 10 '11 at 20:11
SNI is also not available on any mobile OS other than iOSV4.0 or later. – Mike Scott Mar 10 '11 at 20:25

You can only do this if the domains are all subdomains of the same domain, and you have a wildcard SSL certificate.

share|improve this answer
Hmm ok, so it would be a problem if I setup two different sites that both had the same IP then I guess? – ioSamurai Mar 10 '11 at 19:40

there are SSL certificates out there that exploit the Subject Alt Name field of certificates to achieve this, GoDaddy, does a multi domain UCC certificate for a bit more than your average SSL, however older browser support is patchy at best (who needs IE6 anyway ;) )

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.