Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Single SSL Certificate, Multiple Sites?

I asked this as part of another question but feel like it should have its own:

With a shared hosting plan, is there any way to secure multiple domains (assuming the host allows multiple domains under a single plan) with a single SSL certificate? I know that private SSL certificates require a dedicated IP but I am looking for work-arounds (I'd rather not sign up for extra/better plans to keep costs cheap and I really do not want to outsource authentication..as in with OpenID). Any ideas?

(I don't think wildcard certs are an option as they are very expensive...)

like image 784
oym Avatar asked Jul 23 '09 04:07

oym


2 Answers

Basically no, not in a shared hosting plan.

When you have multiple web sites sharing an IP the server knows which site to route to by the Host header. SSL encrypts the entire request and response, including the host header - and a web server does not know which SSL certificate to use to crack open the message before attempting to route it - this is why an SSL site must have a dedicated IP address.

like image 124
blowdart Avatar answered Nov 05 '22 00:11

blowdart


Like I mentioned in your other question, just ask your host for a dedicated IP for each domain that needs SSL. That's a fairly basic request. If they can't do that, then perhaps it's time to go shopping for a different host, as it seems you've outgrown what your host can provide for you.

like image 40
Bob Somers Avatar answered Nov 05 '22 00:11

Bob Somers