Is it possible to use wildcard mapping in IIS7

Question

I'd like to point user test1.domain.com test2.domain.com etc without manually adding the header binding in IIS7. Is this possible? If not automatically can I add the host header programmatically?

Answer 1

As far as I know there are only two options when it comes to host headers in IIS7.

1. You set up a host header/type/port/ip for each domain you want it to handle.
2. You set up no host header but include a type/port/ip on the site you want to handle the multiple domains.

The catch with option #2 is it'll respond to any request on that port and you will be unable to use that same port on another site without a host header.

There may be an ISAPI filter you can load at the server level to intercept the request before it gets to the host header part of the processing but it may be easier to set up a script to handle option #1.

Answer 2

By setting up a wildcard DNS entry, you can have as many names as you want go to your default website. Once the user hits that website, if you need it to redirect to another site, have your default.asp file look for the HOST header to determine if it needs to redirect, otherwise, go ahead and load the rest of the site.

References:

Wildcard Host Headers with IIS7

List of HTTP headers

I'm not very good with web development, but this should at least get you started.

Answer 3

Yes you can.

It is possible to use a wildcard SSL certificate and one single IP.

I can detail how to test this using a self-signed wildcard.

Prerequisites

• MakeCert.exe (Which should be part of a visual studio install or downloadable here)
• winhttpcertcfg.exe (downloadable here)
• APPCMD (Part of Vista / Server 2008 / Windows 7)
• 'Certificates' snap-in for Personal and Local Computer using MMC

Method

Execute the following command from a command prompt

makecert -r -pe -n CN=*.domain.com -ss my -sr currentuser -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12 wildcard.domain.cer

then

• From the RUN command or start menu, type MMC
• File > Add or Remove Snap-ins - Select Certificates, Click Add, Select My user account, Click Finish
• Repeat previous step and select My Computer (then selecting Local Computer)
• Click OK
• Expand Certificates - Current User > Personal > Certificates
• Right click *.domain.com and All Tasks > Export. The PFX file contains both the public and private key for this cert, hence why your asked for a password.
• Copy or Move the Certificate from Current User > Personal > Certificates to Local Computer > Trusted Root Certification Authorities > Certificates
• Import the PFX into Local Computer > Personal > Certificates (this will be the certificate used by your web services.

Now let's create your web servers

• Tidy up your environment :)

Remove existing demo app pools and sites

%windir%\system32\inetsrv\Appcmd delete site "Demo 1"
%windir%\system32\inetsrv\Appcmd delete site "Demo 2"
%windir%\system32\inetsrv\Appcmd delete AppPool "Demo 1 App Pool"
%windir%\system32\inetsrv\Appcmd delete AppPool "Demo 2 Portal App Pool"

• Establish SSL Environment

Tell windows that Network Service is allowed access to your wildcard cert. and tell it to bind the cert to port 443 on your IP address

PathToWinHTTPCertCfg\winhttpcertcfg -g -i "wildcard.domain.com.pfx" -c LOCAL_MACHINE\My -a “Network Service” -p MySecretPassword
 netsh http add sslcert ipport=<YOURLOCALIPADDRESS>:443 certhash=<CERTIFICATE THUMBPRINT> appid=<A GUID IN THE FORM OF {ab3c58f7-8316-42e3-bc6e-771d4ce4b201}>

• Create App Pools and Sites

This is the code to create app pools and sites

%windir%\system32\inetsrv\Appcmd add site -id:100 -name:"Demo 1" -bindings:http/*:80:YOURLOCALIPADDRESS -physicalPath:<PathToDemo1Source> -logfile.directory:<PathToPutLogFilesIn> -traceFailedRequestsLogging.directory:<PathToPutTraceFiles>
%windir%\system32\inetsrv\Appcmd set app "Demo 1/" -applicationPool:"Demo 1 App Pool"
%windir%\system32\inetsrv\Appcmd set site /site.name:"Demo 1" /+bindings.[protocol='https',bindingInformation='*:443:demo1.domain.com']

%windir%\system32\inetsrv\Appcmd add site -id:200 -name:"Demo 2" -bindings:http/*:80:YOURLOCALIPADDRESS -physicalPath:<PathToDemo2Source> -logfile.directory:<PathToPutLogFilesIn> -traceFailedRequestsLogging.directory:<PathToPutTraceFiles>
%windir%\system32\inetsrv\Appcmd set app "Demo 2/" -applicationPool:"Demo 2 App Pool"
%windir%\system32\inetsrv\Appcmd set site /site.name:"Demo 2" /+bindings.[protocol='https',bindingInformation='*:443:demo2.domain.com']

...and that should be you ;) Enjoy!