Forum Moderators: phranque

Message Too Old, No Replies

Does SSL require a different IP address in every case?

         

Kendo

9:57 pm on Aug 10, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Does SSL require a different IP address in every case?

For example, if I have a SSL wildcard and one Apache server with one IP address, can I use SSL for each of the domain aliases? If so, how?

encyclo

11:16 pm on Aug 10, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



You don't need separate IP addresses - you can use Server Name Indication (SNI) with VirtualHosts:

[wiki.apache.org...]

The only caveat is if you need to support IE on Windows XP or earlier, which can't handle SNI - but that's not normally an issue these days.

Kendo

10:07 pm on Aug 11, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Yes, found reference to SNI but yet to get that working.

As far as browsers go, not every browser yet supports SNI, but the most popular browsers do, and some have for quite a while. This includes Firefox 2.0 or later, Opera 8.0 or later, Internet Explorer 7.0 or later (unfortunately, only on Vista), Google Chrome, and Safari 3.2.1 (unfortunately only on OS X 10.5.6 or later).

So SNI won't be much use because a lot of computers are still running XP.

Sill investigating.

Kendo

11:19 pm on Aug 11, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I now have SNI working with a SSL wildcard and multiple sites.

It works OK on Windows XP using IE8. IE7 may not work but all XP users should have updated to IE8.