IIS6, mulitple Versign Certificates and Host Headers

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Janet - 07 Oct 2008 19:58 GMT

I'm running Server 2003, IIS6, with multiple websites using host headers. I
have one website running a Versign cert on port 443. I need to add another
certificate for a separate site but I'm having problems. Does the second
site have to have it's own ip address? Wildcard cert does not work for me
(been there, tried it, failed miserably). If so, got a url for instructions
on setting that up on the server? TCP/IP settings?

Thanks,
Janet

Reply to this Message

David Wang - 08 Oct 2008 03:50 GMT

> I'm running Server 2003, IIS6, with multiple websites using host headers. I
> have one website running a Versign cert on port 443. I need to add another
[quoted text clipped - 5 lines]
> Thanks,
> Janet

Only One Certificate is allowed per Website Binding. This is not an
IIS restriction -- it is an SSL requirement.

Thus, if you need to use multiple certificates (and not a single
certificate with multiple hostnames), you must have multiple Websites,
and Websites have to differ in at least one way between IP, Port, and
HostHeader. Since you likely want to keep port 80 (so users don't need
to enter it on the URL) and the registered Hostname in DNS, most
people obtain a new IP to accomplish multiple SSL websites.

//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

Reply to this Message

Janet - 08 Oct 2008 14:08 GMT

David,

Thanks. I was hoping for an unknown epiphany, but will work on a new ip
address.

Janet

Reply to this Message