Hi,

for one of my clients' domains I am building a website in wordpress and I need an SSL certificate for the same. I am going to get a free SSL certificate from StartSSL (https://www.startssl.com/img/intro.jpg -> first item, top-left corner). I already have another certificate by them which I installed along with ISPConfig on my main personal domain (also on the same Linode).

Do I need a new dedicated IP since I already have one SSL certificate installed? If so where can I get it and what is the price?

Also could anyone please point me to a tutorial as to how I might go about installing the certificate on Ubuntu 14 (x64)? The last time I installed the only other SSL certificate I have (on my main personal domain), it was part of a tutorial on how to install ISPConfig and that bit is too complicated as it includes a lot of other steps relative to ISPConfig installation. Is there a simpler, easier-to-follow resource that might help me?

thanks in advance

Hopefully you got this answered.

In short however: No - you do not need a new IP for additional SSL certificates. Assuming you are using apache you can just load the SSL certificate under the Virtual Service directive. Example below:

<NameVirtualHost *:443>

<VirtualHost *:443>
ServerName www.yoursite.com
DocumentRoot /var/www/site
SSLEngine on
SSLCertificateFile /path/to/www_yoursite_com.crt
SSLCertificateKeyFile /path/to/www_yoursite_com.key
SSLCertificateChainFile /path/to/DigiCertCA.crt
</Virtual Host>

<VirtualHost *:443>
ServerName www.yoursite2.com
DocumentRoot /var/www/site2
SSLEngine on
SSLCertificateFile /path/to/www_yoursite2_com.crt
SSLCertificateKeyFile /path/to/www_yoursite2_com.key
SSLCertificateChainFile /path/to/DigiCertCA.crt
</Virtual Host>

--
Kind Regards,
David

David Flanigan
Mobile: +1.513.560.8231
E: dave@flanigan.net W: http://www.flanigan.net

_________________
--
Kind Regards,
David

David Flanigan
Mobile: +1.513.560.8231
E: dave@flanigan.net W: http://www.flanigan.net

That may work for clients that support Server Name Indication - see the apache wiki for details.

If you need to support clients that don't support SNI then you need something like "Subject Alternate Name" in the SSL cert.

_________________
Rgds
Stephen
(Linux user since kernel version 0.11)