Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I couldn't find an clear answer to the question :

-Does ISA 2006 support more than 1 listener on the same port (HTTPS /443 , with the same certificate / and different method of authentication - one to FBA with AD and one with no authentication).

I would need that in order to publish ADFS (for Azure ) through the same ISA server where we have the websites published , and I don't seem to be able to configure it .

Thank you!

share|improve this question

1 Answer 1

up vote 3 down vote accepted

Using multiple listeners on the same socket (IP:port pair) is not a limitation of ISA, but a limitation of the TCP/IP socket implementation.

If you want to have multiple HTTPS servers on the same machine, you need to have a separate IP address for each site unless you are using SAN or SNI.

Using one listener and multiple SSL certificates is not possible because of a limitation of the original SSL protocol. This was fixed in SSL by using SAN certificates and in TLS with SNI extension.

The only way to have such configuration in SSL3 is to have one listener and a multi-domain certificate (certificate with subject alternative names, aka SAN) or a wildcard certificate (if your hosts are subdomain of the same domain).

New versions of SSL protocol (aka TLS) support multiple certificate via TLS/SNI extension of the SSL protocol, but this might be not supported by all the clients that are accessing your server. See: http://en.wikipedia.org/wiki/Server_Name_Indication

share|improve this answer
    
Thank you Mircea ! –  Alex H May 22 '12 at 6:43
    
Welcome. I am glad my answer helped. –  Mircea Vutcovici May 22 '12 at 15:30

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.