2 ssl not working on same IP

Question

I have 2 different domains with their respective certificates, but both are hosted on one single IP. problem is that when i enable one, then the SSL certificate is enabled for both sites. like SSL for site A is applied to site A and B as well. but if i disable the certificate of site A, then the SSL of site B remains on the site B and works properly. how to resolve this issue.

i have enabled name based virtual hosting and tried many tweaks, noting works so far.

You'll need to post the relevant parts of your configuration, I think. — Michael Hampton, Feb 04 '13 at 20:03

score 5 · Accepted Answer · answered Feb 04 '13 at 20:02

5

Name based virtual hosting doesn't work for SSL, as the Host header is part of the encrypted payload - Apache doesn't know which certificate to present.

You need a second IP for the second certificate.

answered Feb 04 '13 at 20:02

ceejayoz

32,469
7
81
105

Or you need to get a single certificate that covers both names. – David Schwartz Feb 04 '13 at 20:02
3

You've never heard of [SNI](http://serverfault.com/a/417580/126632)? – Michael Hampton Feb 04 '13 at 20:02
@MichaelHampton: SNI is really not a solution yet since there are still too many browsers out there that don't support it. – David Schwartz Feb 04 '13 at 20:03
@MichaelHampton I have, and unfortunately it's a no-go in most environments because of IE+XP. – ceejayoz Feb 04 '13 at 20:03
1

Ehh, 15% and dropping may or may not be "too many" depending on many factors. – Michael Hampton Feb 04 '13 at 20:04
Dropping support for 15% of the Internet seems like a bad idea in most situations. – ceejayoz Feb 04 '13 at 20:18

score 2 · Answer 2 · answered Feb 04 '13 at 20:02

2

You need a dedicated IP address per SSL certificate. That is a requirement.

answered Feb 04 '13 at 20:02

Daniel t.

9,061
1
32
36

score 0 · Answer 3 · answered Feb 05 '13 at 21:40

You need a SAN/UCC cert which allows multiple domains on 1 ip address. I've had your configuration before on an Amazon AWS instance and at the time they only allocated 1 ip address per server. I still have 5 sites with different domain names using a single SSL.com Subject Alternative Name cert on that server.

2 ssl not working on same IP

3 Answers3