2

I currently have several sites deployed on an iis 8.5 server, each site has its own 80 and 443 binding, i need to have different certificates for each one of the hostnames configured on the machine, however when i want to edit the cert associated to the 443 binding on one site, i get the following message:

At least one other site is using the same HTTPS binding and the binding is configured with a different certificate. are you sure that you want to reuse this HTTPS binding and reassign the other site or sites to use the new certificate?

Yes / No

This happens even though i have the hostnames set for each binding of each site,

If i hit yes, all bindings are modified and all sites remain with the same cert, and if i hit no, nothing happens,

How can i change the certs for just 1 of the sites i have hosted?

2

This can be achieved using server name indication, and configuring it on IIS 8 (not available on previous versions)

Full procedure can be seen here: https://www.digicert.com/ssl-certificate-installation-microsoft-iis-8.htm#multiple

0

You cannot, unless you have multiple IP addresses bound to your NIC. The host header sent per request isn't visible to your server, as such, it resolves which SSL certificate to use based on the IP requested - essentially SSL bindings are done against the IP, not the hostname (I know it doesn't look like that in the GUI).

Why do you want a certificate per site? Why not just get a wild card and set the host header per site?

Please see the question/answer here, essentially the same as what you're asking.

  • Actually, it can be achieved with server name indication it seems! :) already tested it and it works beautifully – Juan Sebastian Jun 21 '17 at 15:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.