0

I'm being tasked with binding multiple SSL certificates to the same website.

I have a single website with a single domain that the client wants to bind multiple SSL certs from different CAs. So www.mydomain.com needs to have multiple SSL certs bound to it.

I don't think this is possible but is there a way this can be done?

  • 1
    I literally googled your exact question: forums.iis.net/t/1173794.aspx/1 – Steffan Donal May 22 '13 at 12:25
  • 1
    @Ruirize That link is not about my situation. I have a single website with a single domain that the client wants to bind multiple SSL certs from different CAs. So www.mydomain.com needs to have multiple SSL certs bound to it. – もしもし May 22 '13 at 12:41
  • Do the multiple SSL certs all have unique common names, (i.e. site.domain1.com, site.domain2.com, etc)? – mahnsc May 22 '13 at 13:41
  • For what reason would anyone want to do that.. you can have multiple certificates, but you can only realistically use one at a time. You can also have multiple CAs, but how do you decide which certificate to set up your session with? – NickW May 22 '13 at 13:43
  • @NickW, I don't know why anyone would want to do this either but I was curious whether the point about binding multiple SSL certs was for supporting multiple CA certs using the same www.mydomain.com name or multiple certs using different names. Just to satisfy my curiosity. – mahnsc May 22 '13 at 13:59
0

Well, this is one way to do it, although I think that it is an abomination.

You could request the certificates, then install each one of a different server which is configured to serve up the same site with the same domain name. The next part could vary slightly, you could either use Round Robin DNS, but that requires multiple public IPs, and will have issues with fault tolerance(there's a bit written on the page about the shortcomings). You could also set up a load balancer/proxy, which doesn't require that the servers have public IPs, but it is another layer of complexity.

Best of luck convincing them that it isn't how HTTPS works.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.