Menu
This question is asked multiple time and there are well briefed answers, IE on XP does not support
But we have problem that we have not enough public ips to assign for individual ssl based url. I have very basic question that can we run SNI sites(that points to single ip) on windowsXP and IE8.
We have some workarounds like, buy an other pool of IPS but that will really cost us a lot. Thanks
280
Because SNI is relatively new, not all browsers support SNI. If the browser does not support SNI, it is presented with a default SSL certificate.
In Internet Explorer, on the Tools menu, click Internet Options, and select the Advanced tab. In the Settings box, under the Security header, click to select the Use SSL 2.0 and Use SSL 3.0 check boxes (if they are not already selected), and then click OK.
Google Chrome is also one of the leading browsers in terms of security. It provides the SNI support on Chrome version 6 and newer on Windows XP and above. Also, the feature is available on Chrome version 5.0. 342.1 and above on macOS X 10.5.
The only way to have multiple certificates on the same IP and port is to use SNI, and this needs a browser which can do SNI. Because you usually don't have control about the client you cannot force them to upgrade windows or use another browser on the same platform.
So if you really need to support multiple certificates on a single IP and cannot use SNI, your only option is to have the http server listen on different ports and setup the certificates based on the port. Note, that this might give you other problems, because non-standard port for https might be blocked by firewalls.
104
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
