Topic: Multiple SSL certificates

[Tony Howden]

Hi All

I posed this question in a reply to an older post and since this forum seems to only show the most recent 'new' posts at the top I figured my query will get overlooked.

The original post is at
http://forums.contribs.org/index.php?topic=16087.msg62091#msg62091

and the essence of the query is how to enable multiple SSL certificates on a server, i.e. a different certificate/key set for each virtual domain.

TIA

cheers
Tony

[Charlie Brady]

Tony Howden wrote:

> and the essence of the query is how to enable multiple SSL
> certificates on a server, i.e. a different certificate/key
> set for each virtual domain.

This has been asked and answered a million times. It can't be done - because SSL is negotiated (using the certificate) before the server knows which virtual domain is being requested.

The only way to do it is to have multiple IP addresses on the external interface, and a different IP address per virtual domain. You'll need to pay your ISP a lot more to get multiple IP addresses, and you'll need to do significant customisation of the SME software to support the extra addresses.

Charlie