Re: How to host muliple web sites in IIS6.0 all must be SSl
From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 04/19/04
- Next message: Wayne: "Template Persistent Cache initialization failed"
- Previous message: Jonathan Maltz [MS-MVP]: "Re: Server Name in the URL with ISS 6.0"
- In reply to: Vince: "Re: How to host muliple web sites in IIS6.0 all must be SSl"
- Next in thread: Vince: "Re: How to host muliple web sites in IIS6.0 all must be SSl"
- Reply: Vince: "Re: How to host muliple web sites in IIS6.0 all must be SSl"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 19 Apr 2004 12:22:32 +1000
Hi,
a) You can not use host-headers with SSL - this is because the Host: HTTP
header is encrypted, and the webserver doesn't know which website to route
the request to. So, each SSL secured website must run on its own IP
address -or- use a unique port (if you are running multiple SSL secured
sites on a single IP address)
b) The FQDN (fully qualified domain name) of the website must match that in
the SSL certificate's "common name" for the user to be able to browse the
website without see any errors (other things could also generate an error -
untrusted root CA, or expired cert). So, if you have 3 sites running on 3
different IP addresses, you need to configure the DNS so that
host1.myCompany.com -> IP address1
host2.myCompany.com -> IP address2
host3.myCompany.com -> IP address3
c) You need to get hold of an SSL certificate for each site (you did not
mention that you have performed this step).
d) The IP addresses you are using are not routable on the public internet.
You also mention that the server's IP address is 192.168.0.5. The server
needs to have 1 IP address *per SSL site* bound to the one of the network
adapters in the machine. There is no need to have more than 1 adapter to
host SSL sites.
Cheers
Ken
"Vince" <vince@_nospam_sbhb.com> wrote in message
news:7uCgc.893$Hf.615742@newshog.newsread.com...
: Hummm...
: so servers at an ISP's that host hundreds of web site have a NIC for each
: site? I don't get it.
:
: "dnagel" <NOTGrandNagel@hotmail.com> wrote in message
: news:%23LddSlYJEHA.3120@TK2MSFTNGP09.phx.gbl...
: > I'm not even a novice here, but, I recall that you'll need three NIC's
: > present for this capability.
: > If you're using DNS then maybe you can just set up three diferent names
: > pointing to the same
: > IP using diferent ports.
: >
: > good luck,
: >
: > D.
: >
: >
: > Vince wrote:
: >
: > >I'm trying to host three web sites in IIS 6.0 and all must be SSL.
I've
: > >gone through many of the MS kb's but have not found a good answer.
I've
: > >found that IIS can host multiple sites each with it's own IP. And I've
: > >found that host header do not work with SSL. What I've done:
: > >
: > >Stopped default web site.
: > >Created three seberate folders containing a default.htm to represent
each
: of
: > >the sites.
: > >In IIS, created three web sites, assigned each it's own IP192.168.0.10,
: .11
: > >and .12 on port 80 and left the host header blank.
: > >
: > >the server IP is 192.168.0.5 and the gateway is 192.168.0.1
: > >
: > >So far I have not been able to get any one of the new sites to respond
by
: > >IP. "The error I get is The page cannot be displayed" "Cannot find
: server
: > >or DNS Error"
: > >
: > >I guess I don't understand how DNS comes into play eventhough I am only
: > >browsing from the server to test the sites and/or do I need to register
: the
: > >additional IP's someplace.
: > >
: > >All help is appreciated
: > >
: > >
: > >
: > >
:
:
- Next message: Wayne: "Template Persistent Cache initialization failed"
- Previous message: Jonathan Maltz [MS-MVP]: "Re: Server Name in the URL with ISS 6.0"
- In reply to: Vince: "Re: How to host muliple web sites in IIS6.0 all must be SSl"
- Next in thread: Vince: "Re: How to host muliple web sites in IIS6.0 all must be SSl"
- Reply: Vince: "Re: How to host muliple web sites in IIS6.0 all must be SSl"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
