Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am using Virtualmin (GPL) to manage my servers. I have multiple sites hosted on it binded to single IP address.

I want to enable SSL for multiple servers hosted on it. Can I bind SSL for all such servers via single IP or do I need to purchase IP for each server. Any link to guide, tutorial will be really helpful.

I have already gone through http://www.virtualmin.com/documentation/tutorial/how-to-add-multidomain-ssl-certificate which helps me to bind SSL for multiple server but with individual IP.

thanks for reading question, waiting for help on this

Naveen

share|improve this question

3 Answers 3

up vote 2 down vote accepted

Generaly one SSL certificate is for one domain and binds to one IP address. To have independent SSL certs for each site you will need to purchase additional IP addresses.

However...

If your sites are all subdomains of one main domain name then you could use a wildcard certificate that covers *.example.com. This binds to one IP address but will cover for instance: site1.example.com, site2.example.com

If your other sites use different domain names you can purchase a multi domain SSL certificate (also known as UCC or SAN Certificate) that cover up to 100 different domains. There are some issues with these which may be important depending on your situation. The certificate details list all the other domains covered. This information is only really visible if someone clicks the lock in their browser and checks the certificate details. You cannot change the certificate after purchase so if you want to add or remove domains listed on the cert you will need to purchase a new one (although this varies between certificate suppliers).

share|improve this answer
    
sounds not so good to me :P. My only question is how do hosting providers such as GoDaddy etc can have SSL site hosted on their shared hosting. Do they allocated seperate IP to each website in their shared hosting? I dont believe so, what you think about it ? –  naveensky Oct 9 '11 at 16:09
    
Shared hosting providers are tied to the same SSL hosting rules as everyone else. Just did a quick Google and according to the GoDaddy FAQs "We automatically issue a dedicated IP address when an SSL certificate is installed on our shared hosting servers." –  Paul Willis Oct 9 '11 at 16:23
    
but then does that mean that website owner need to update their DNS so that their site points to new ip address if I go from non-ssl website to SSL based website ? –  naveensky Oct 9 '11 at 16:32
    
Yes it does, both the SSL and non-SSL version of the site will need to use the same IP address –  Paul Willis Oct 9 '11 at 16:58
    
Thanks Paul, I will get a seperate IP then –  naveensky Oct 9 '11 at 17:51

In addition to @paul-willis statement

You can use different SSL-cert for different hosts on the same IP only if each SSL-server will be binded to different SSL-ports

share|improve this answer

What you need is SNI. See http://en.wikipedia.org/wiki/Server_Name_Indication. AFAIK, Virtualmin does not support setting up SNI in the Virtual Hosts directly. However it tolerates it (there is an option you need to activate to allow multiple SSL sites on one IP, introduced in one of the latest Virtualmin versions). You must set them up manually though.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.