Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have two sites that need SSL for entering payment and account information, and there will be a third in the not too distant future. If I get a VPS that says it has three seperate IP addresses, then I can host the three sites with different SSL certificates right? since they're bound to the IP address... (they do need separate certs... or at least two of them do... might use one cert for two, and then another for the third.)

share|improve this question

3 Answers 3

up vote 3 down vote accepted

Yes, as long as you have one IP address per site you need to access via HTTPs you will be fine.

Though you will not be able to use one certificate for two domains unless they are sub-domains for the same domain and you get a wild-card certificate.

It is possible for multiple sites to run HTTPS off a single IP address if you use Server Name Indication, but this will mean users of older browsers have trouble with your sitea so I wouldn't currently recommend it.

share|improve this answer
    
okay, so I will need three different certs for the three seperate domains? that makes sense... thanks for the help –  Max Schmeling Aug 5 '09 at 14:24
    
Actually it is possible to use the same certificate for more than one domain, godaddy and some other CA have a product where they can roll up to 100 domains under one certificate. although I never really checked it. –  Adam Benayoun Aug 5 '09 at 14:57
    
I was under the impression that not all client applications (or servers for that matter) supported multi-name certificates even though the cert format allows for it. That might be old knowledge, but I'd test to confirm compatibility before buying a multi-name cert. –  David Spillett Aug 5 '09 at 15:06
    
I'm running a 5-name UCC certificate for some Exchange services - I've yet to stumble upon a browser or a mobile device that cannot handle it. Though I don't doubt they exist, but it seems oldschool? ^^ Having one IP address per site should be the more pressing part anyway I guess... –  Oskar Duveborn Aug 5 '09 at 15:48

That is correct. You need a separate SSL cert per IP address. I believe that more and more browsers are working with certs that specify Alt Names, but for the greatest compatibility, you should do one per.

share|improve this answer

Yes you can, assuming you are talking about Apache:

The best option would be to have mutliple IP addresses and do IP based Virtual Hosts. It is possible to do name based virtual hosts with ssl by using mod_gnutls, but I would opt for IP based because it might not work with older browsers.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.