securing multiple websites using wildcard certificate - one IIS 6.0 server

My setup is as below -

Windows Server 2003 SP1

3 websites running in IIS 6.0
a.domain.com
b.domain.com
c.domain.com

internal IP 1.1.1.1
external ip 2.2.2.2
1-to-1 nat of 2.2.2.2 to 1.1.1.1 by firewall

currently all 3 websites are reachable from outside

What I want to do is enable SSL on all 3 sites. I realize I can do
this by obtaining a wildcard certificate *.domain.com.

questions I have -
1. since there are multiple websites, which one will request for SSL?
(generate CSR)
2. how can I install the certificate on the other 2 websites? do I
create a request from IIS and just import the certificate obtained from
step 1 or do I import/export?

I've installed single SSLs no problem but first time using wildcard and
it is somewhat confusing.

I know with SP1, we can now use a wildcard SLL on multiple websites
using host headers.

Thanks!

.

Relevant Pages

  • Re: cannot access site by IP - bad request invalid hostname
    ... You call the above two websites, but from IIS perspective, it is one website ... Request", ... The xxx.xxx.xxx.69 was setup initially with the server setup. ...
    (microsoft.public.inetserver.iis)
  • Re: HOW MORE FRUSTRATING CAN THIS GET!!!
    ... SBS2K3 although you referred to an SBS2K in your original ... Win2K3 IIS security changed fairly ... You now have two main avenues to deploy websites besides ... >> but I have no experience with SBS. ...
    (microsoft.public.isa)
  • Re: ISS problem
    ... It sounds like you are running Small Business Server. ... IIS will keep backup copies of its configuration (check in the IIS Manager ... Since they are independent websites, ... sure that both websites do NOT share the same IP, Port, and Host header. ...
    (microsoft.public.inetserver.iis)
  • Re: Virtual directories in IIS
    ... This really isn't an issue with IIS but rather names. ... You are authoring HTML, and this is simply how HTML works. ... Your concept of "lock everything within my virtual folder" has absolutely no ... you can certainly run custom applications that "rebase" websites ...
    (microsoft.public.inetserver.iis)
  • Wildcard certificate - multiple sites - one IIS 6.0 server
    ... Windows Server 2003 SP1 ... currently all 3 websites are reachable from outside ... this by obtaining a wildcard certificate *.domain.com. ... create a request from IIS and just import the certificate obtained from ...
    (microsoft.public.inetserver.iis.security)