Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have 2 different domains with their respective certificates, but both are hosted on one single IP. problem is that when i enable one, then the SSL certificate is enabled for both sites. like SSL for site A is applied to site A and B as well. but if i disable the certificate of site A, then the SSL of site B remains on the site B and works properly. how to resolve this issue.

i have enabled name based virtual hosting and tried many tweaks, noting works so far.

share|improve this question
    
You'll need to post the relevant parts of your configuration, I think. –  Michael Hampton Feb 4 '13 at 20:03

3 Answers 3

up vote 5 down vote accepted

Name based virtual hosting doesn't work for SSL, as the Host header is part of the encrypted payload - Apache doesn't know which certificate to present.

You need a second IP for the second certificate.

share|improve this answer
    
Or you need to get a single certificate that covers both names. –  David Schwartz Feb 4 '13 at 20:02
3  
You've never heard of SNI? –  Michael Hampton Feb 4 '13 at 20:02
    
@MichaelHampton: SNI is really not a solution yet since there are still too many browsers out there that don't support it. –  David Schwartz Feb 4 '13 at 20:03
    
@MichaelHampton I have, and unfortunately it's a no-go in most environments because of IE+XP. –  ceejayoz Feb 4 '13 at 20:03
1  
Ehh, 15% and dropping may or may not be "too many" depending on many factors. –  Michael Hampton Feb 4 '13 at 20:04

You need a dedicated IP address per SSL certificate. That is a requirement.

share|improve this answer

You need a SAN/UCC cert which allows multiple domains on 1 ip address. I've had your configuration before on an Amazon AWS instance and at the time they only allocated 1 ip address per server. I still have 5 sites with different domain names using a single SSL.com Subject Alternative Name cert on that server.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.