This will only work with wildcard domain SSL certificates. *.abc.com.
Example: Host www.abc.com on identifier 1 with SSL cert assigned as www.abc.com on ip 1.1.1.150 Also host www2.abc.com on identifier 2 with SSL cert assigned as www2.abc.com on ip 1.1.1.150. (Both on standard SSL port 443)
This will not work because IIS uses only one cert per IP/Port. So when you try to goto www2 IIS will serv up www.aba.com's certificate to the client. And the cleint will warn about invalid cert for the site, because www2.abc.com does not match www.abc.com.
Now, if you have a wildcard domain certificate, like *.abc.com. Then it will work fine, as the wildcard will match both sites.
I have this set up and running for with a wildcard cert but now I add another IP address and a single SSL cert to the server and I can't seem to get the single domain cert to work with the new IP address. Have you seen this issue?
Matthew Cosier is a Principal Consultant at Hazaa, http://www.hazaa.com.au
Matthew also manages an online blog about Software Development and all things Microsoft at http://cosier.wordpress.com
3 comments:
This will only work with wildcard domain SSL certificates. *.abc.com.
Example:
Host www.abc.com on identifier 1 with SSL cert assigned as www.abc.com on ip 1.1.1.150
Also host www2.abc.com on identifier 2 with SSL cert assigned as www2.abc.com on ip 1.1.1.150. (Both on standard SSL port 443)
This will not work because IIS uses only one cert per IP/Port. So when you try to goto www2 IIS will serv up www.aba.com's certificate to the client. And the cleint will warn about invalid cert for the site, because www2.abc.com does not match www.abc.com.
Now, if you have a wildcard domain certificate, like *.abc.com. Then it will work fine, as the wildcard will match both sites.
I have this set up and running for with a wildcard cert but now I add another IP address and a single SSL cert to the server and I can't seem to get the single domain cert to work with the new IP address. Have you seen this issue?
This will not truly have success, I consider so.
Post a Comment