Re: 2 SSL certs for 1 IIS site?
From: Jerry III (jerryiii_at_hotmail.com)
Date: 11/26/03
- Next message: Jerry III: "Re: Web Site utilization"
- Previous message: Yogita Manghnani [MSFT]: "RE: Adding Application Configuration for a Virtual Directory"
- In reply to: Andrew Davis [MS]: "Re: 2 SSL certs for 1 IIS site?"
- Next in thread: Philipp Ott: "Re: 2 SSL certs for 1 IIS site?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 26 Nov 2003 12:07:07 -0800
Andrew, this is not completely accurate, not only each SSL certificate needs
its own IP but it actually needs its own web site. IIS does not allow you to
assign certificates on an IP basis, you can only have a single certificate
per web site, no matter how many IP addresses that web site has. So if you
want to create multiple SSL identities for your web site you actually have
to create two sites in IIS.
Jerry
""Andrew Davis [MS]"" <adavis@online.microsoft.com> wrote in message
news:MGBFl$EtDHA.2124@cpmsftngxa06.phx.gbl...
> Keith is right on. Each Certificate will need it's own IP address.
>
> Yes this will work for load balancing as well and you should be able use
> the same certificate on each of the servers. For example the "owa"
> certificate can be installed on Server A and Server B for each of the owa
> sites, and the "webmail" certificate can be installed on Server A and
> Server B for each of the webmail sites.
>
> DNS resolution will forward request for owa to the NLB IP address which
> will then forward to the Virtual IP of either the owa site on Server A or
> Server B.
>
> 219277 Load Balancing HTTP with WLBS
> http://support.microsoft.com/?id=219277
>
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> Thanks!
> ~Andrew Davis
> Microsoft PSS Security
>
> >From: "Keith W. McCammon" <km@km.com>
> >Subject: Re: 2 SSL certs for 1 IIS site?
> >Date: Tue, 25 Nov 2003 15:20:37 -0500
> >No, but you can create another site pointing to the same web root, with
the
> >same config, and apply the certificate for the other common name to that
> >site.
>
> >"J Yue" <jasperyue@msn.com> wrote in message
> >news:uUsrm74sDHA.2392@TK2MSFTNGP10.phx.gbl...
> > We have an IIS site with a SSL cert installed.
> > We are setting up a new extra URL and a new cert to access this site and
> > needed SSL for it.
> > Can we configure IIS to accept 2 certs for the same site? so you will
be
> > getting SSL no matter which URL you use to get to the site.
> >
> >Will this work if i take it to the next level: duplicate the same setup
to
> >another server and use windows network load balancing.
> >That is:
> >Both URL will deliver the request to either one of the servers and serve
> the
> >same content??
> >1. http://owa
> >2. http://webmail
> >Server A: OWA1
> >Site #1: header = owa, port 80/443
> >Site #2: header = webmail, port 80/443
> >Server B: OWA2
> >Site #1: header = owa, port 80/443
> >Site #2: header = webmail, port 80/443
> >
> > Thanks
> > -jas
>
- Next message: Jerry III: "Re: Web Site utilization"
- Previous message: Yogita Manghnani [MSFT]: "RE: Adding Application Configuration for a Virtual Directory"
- In reply to: Andrew Davis [MS]: "Re: 2 SSL certs for 1 IIS site?"
- Next in thread: Philipp Ott: "Re: 2 SSL certs for 1 IIS site?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|