Re: SSL & Host Header Names

From: Alun Jones [MS MVP] (alun_at_texis.com)
Date: 05/28/03 

Date: Wed, 28 May 2003 03:50:28 GMT

In article <#8GIESLJDHA.2052@TK2MSFTNGP11.phx.gbl>, "Karl Levinson [x y]
mvp" <levinson_k@despammed.com> wrote:
>You can't use host headers with SSL. But you can use host headers on the
>unencrypted home page that redirects users to the SSL page, and then also
>use either different port numbers or different IP addresses for each web
>site.

There is light at the end of the tunnel, though:

http://www.ietf.org/internet-drafts/draft-ietf-tls-extensions-06.txt

specifies an extension to the ClientHello, that includes the ability to
request a specific host name. It may eventually get approved, and it may
eventually get implemented. We'll see how long that takes - I wouldn't
expect it soon. For now, it's worth accepting that TLS / SSL requires that
the (single) certificate gets sent by the server before the host header is
received from the client, so different certificates require different
combinations of IP and port. If your several hosts are host1.example.com,
host2.example.com, host3.example.com, you can use a wild-card certificate,
with a name of *.example.com - otherwise, you'll need to work around it.

Alun.
~~~~

Relevant Pages

  • Multiple Web Hosting Problems
    ... You cannot use SSL and Host Headers together because ... of the site imbedded in them, so one certificate can only ... >setting the New Web site up IIS with my Internal IP ...
    (microsoft.public.windows.server.sbs)
  • Re: Mulit-domain SSL cert installation
    ... SSL rather than IIS. ... The number of domains of a certificate ... Use same IP and SSL Host Headers with wildcard certificate. ... multi-domain cert for multiple hosts under separate domain names. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS 6 and SSL
    ... SSL cert binding is specific to a IP:Port and does not support host headers. ... If it is internal and you control all clients accessing the website, ...
    (microsoft.public.inetserver.iis)
  • RE: Windows 2003 SSL and Host Headers
    ... In order to use SSL with host headers you either require multiple IP ... 1 for each SSL certificate you are going to use or a wildcard ...
    (microsoft.public.windows.server.general)
  • RE: Single SSL site and host headers
    ... problem with host headers and SSL is that the information required for IIS ... 187504 HTTP 1.1 Host Headers Are Not Supported When You Use SSL ... | Sender: "Alan K" ...
    (microsoft.public.inetserver.iis.security)
Loading