Multiple SSL Certificates

William O'Higgins Witteman william.ohiggins-H217xnMUJC0sA/PxXw9srA at public.gmane.org
Mon May 17 13:04:23 UTC 2010


On Mon, May 17, 2010 at 08:41:58AM -0400, Jamon Camisso wrote:
>On 17/05/10 06:35 AM, William O'Higgins Witteman wrote:
>>On Mon, May 17, 2010 at 02:03:52AM -0400, Jason Carson wrote:
>>>Hello everyone,
>>>
>>>I currently have 2 domain names running on one IP address. Is it possible
>>>to setup two SSL certificates, one for each domain?
>>
>>No, because of the way that SSL works (as I understand it).  Here's a
>>reference:
>>
>>http://httpd.apache.org/docs/2.0/ssl/ssl_faq.html#vhosts
>
>Using Server Name Indication (SNI) allows hosting multiple named ssl
>virtual hosts on a single IP. mod_gnutls supports SNI, and I think
>recent versions of mod_ssl do too. Take a look here:
>
>http://www.outoforder.cc/projects/apache/mod_gnutls/
>http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI

Ooo, neat, thank you.

>The one caveat is that older browsers like IE6 don't support SNI.
>more here:
>http://en.wikipedia.org/wiki/Server_Name_Indication#Browsers

Drat, IE6 is still way too prevalent.  Maybe soon.
-- 

yours,

William

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 190 bytes
Desc: Digital signature
URL: <http://gtalug.org/pipermail/legacy/attachments/20100517/0db7bb31/attachment.sig>


More information about the Legacy mailing list