Linode Forum
https://forum.linode.com/

install multiple SSL sites on one VPS
https://forum.linode.com/viewtopic.php?f=19&t=9592
Page 1 of 1

Author:  Yifan [ Mon Dec 03, 2012 11:54 am ]
Post subject:  install multiple SSL sites on one VPS

You can install multiple SSL sites on one VPS and one IP. It goes well with chrome and and firefox, but not with IE (default setting). Under IE, the the second site's SSL will be mismatched.

I tried to fix this error by installing extra IPs. Each IP for different domain name. Still doesn't work.

Then I edit the conf file and added each IP to each domain name's port 443. It works!

Instead of "listen :443;", use ""listen 198.58.101.98:443;" Like this

listen 198.58.100.75:443;
server_name firstdomain.com;

listen 198.58.101.98:443;
server_name seconddomain.com;

I use nginx.

Author:  Vance [ Wed Dec 05, 2012 1:09 am ]
Post subject:  Re: install multiple SSL sites on one VPS

Yifan wrote:
It goes well with chrome and and firefox, but not with IE (default setting).

This is the result of varying support for Server Name Indication (SNI).

Author:  Guspaz [ Wed Dec 05, 2012 11:37 am ]
Post subject:  Re: install multiple SSL sites on one VPS

It'll be a few years yet until SNI is safe to use. 2014-2015, probably, since WinXP EOLs in 2014.

If it was just IE6, it'd be safe to use now (IE6's marketshare is well under 1% in most countries), but sadly SNI isn't supported at all by IE on WinXP, regardless of version.

Author:  Yifan [ Sat Dec 08, 2012 5:46 am ]
Post subject:  Re: install multiple SSL sites on one VPS

No, it's not just IE6. I have IE9 on windows 7 and it still has problems if "Use TLS1.0 (1.1, 1.2)" options are not turned on.

Author:  hoopycat [ Sat Dec 08, 2012 8:35 am ]
Post subject:  Re: install multiple SSL sites on one VPS

Any browser will have problems if you turn off TLS, not just IE...

Author:  Yifan [ Sat Dec 08, 2012 11:17 pm ]
Post subject:  Re: install multiple SSL sites on one VPS

By default, under internet options,Use SSL 2.0 and Use SSL 3.0 are checked, TLS options are not checked. That's why IE has problems.

Page 1 of 1 All times are UTC-04:00
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/