7

I currently have several sites deployed on an iis 8.5 server, each site has its own 80 and 443 binding, i need to have different certificates for each one of the hostnames configured on the machine, however when i want to edit the cert associated to the 443 binding on one site, i get the following message:

At least one other site is using the same HTTPS binding and the binding is configured with a different certificate. are you sure that you want to reuse this HTTPS binding and reassign the other site or sites to use the new certificate?

Yes / No

This happens even though i have the hostnames set for each binding of each site,

If i hit yes, all bindings are modified and all sites remain with the same cert, and if i hit no, nothing happens,

How can i change the certs for just 1 of the sites i have hosted?

5

This can be achieved using server name indication, and configuring it on IIS 8 (not available on previous versions)

after checking the server name indication checkbox you won't get the same message again

Server name indication ends up being the same as having virtual hosts on nginx or apache.

| improve this answer | |
  • This link is broken... Don't paste urls... Paste the actual content itself – Mick May 26 at 8:55
0

You cannot, unless you have multiple IP addresses bound to your NIC. The host header sent per request isn't visible to your server, as such, it resolves which SSL certificate to use based on the IP requested - essentially SSL bindings are done against the IP, not the hostname (I know it doesn't look like that in the GUI).

Why do you want a certificate per site? Why not just get a wild card and set the host header per site?

Please see the question/answer here, essentially the same as what you're asking.

| improve this answer | |
  • Actually, it can be achieved with server name indication it seems! :) already tested it and it works beautifully – Juan Sebastian Jun 21 '17 at 15:31
  • But this is more an "application-layer" management than a network one, since it's done through the host header at http level. – Juan Sebastian May 27 at 16:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.