Multiple Domain SSL

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Multiple Domain SSL

Jon Moores
When a dotCMS instance hosts several sites under different domain names how
would this work with an SSL connection / certificate from a CA?

Will it be enough to use an IP address as the CN to be valid across all
hosts?

Thanks
Jon
Reply | Threaded
Open this post in threaded view
|

Re: Multiple Domain SSL

Jason Tesser-2
Well this is a limitation of SSL

But you have 2 choices

1. Get a wildcard Cert that can handle

2. Buy multiple certs But each cert will need to be on a separate IP. Just
point all the IPs at dotCMS.

Thanks,
Jason Tesser
dotCMS Lead Development Manager
1-305-858-1422


On Fri, Feb 5, 2010 at 4:55 AM, Jon Moores <[hidden email]>wrote:

>
>
> When a dotCMS instance hosts several sites under different domain names how
> would this work with an SSL connection / certificate from a CA?
>
> Will it be enough to use an IP address as the CN to be valid across all
> hosts?
>
> Thanks
> Jon
>
>  
>
Reply | Threaded
Open this post in threaded view
|

Re: Multiple Domain SSL

wezell-2
Administrator
Jason's right on - https on port 443 = 1 ip for 1 hostname with no virtual
hosting (save for wildcard certs).   But you might be able to handle
multiple certs/ip in apache and point it using mod_jk or mod_proxy to the
same dotCMS instance on the back end.  Basically using apache as an ssl
proxy if you will.  Some functions might have difficulty, but for the most
part it could work

Will

----
Will Ezell
www.dotcms.org
phone: 305.858.1422 ext. 286
direct: 978.296.4239
skype: wezell1




On Fri, Feb 5, 2010 at 6:07 AM, Jason Tesser <[hidden email]> wrote:

>
>
> Well this is a limitation of SSL
>
> But you have 2 choices
>
> 1. Get a wildcard Cert that can handle
>
> 2. Buy multiple certs But each cert will need to be on a separate IP. Just
> point all the IPs at dotCMS.
>
> Thanks,
> Jason Tesser
> dotCMS Lead Development Manager
> 1-305-858-1422
>
>
>
> On Fri, Feb 5, 2010 at 4:55 AM, Jon Moores <[hidden email]>wrote:
>
>>
>>
>> When a dotCMS instance hosts several sites under different domain names
>> how would this work with an SSL connection / certificate from a CA?
>>
>> Will it be enough to use an IP address as the CN to be valid across all
>> hosts?
>>
>> Thanks
>> Jon
>>
>>
>
>
>
>