We have an application running on one website. We want to co-brand it for
multiple names. Is it possible to put multiple SSL identities on one site?

ie:
http://www.site1.com
http://www.site2.com
http://www.site3.com

https://secure.site1.com
https://secure.site2.com
https://secure.site3.com

Is it safe to assume that I can do this, but I would need a unique IP for
each site? One Web, multiple IP's multiple SSL's?

Thanks.

On Tue, 19 Oct 2004 13:46:14 -0400, "Kevin Antel" <kevina@cqlcorp.com>
[quoted text, click to view]

SSL needs a unique IP or port for each site. Ports are problematic
since they have to be specified on the URL, so separate IP's is the
norm.

Hi Kevin,

You could setup 1 site for all unsecured content and assign it multiple
names using host header name.

For secure sites, I believe the best solution would be to setup one Web Site
on IIS for each of your secure site. On home folder tab you would point each
of these secure sites to same folder on hard drive (this way each secure web
site you create points to same content).

For each of your secure sites you will need 1 free IP address. Another (less
attractive method) is to use 1 IP but run each secure site on different TCP
port. This is not very practical since someone accessing secure site 3 would
have to enter https://secure.site3.com:446/ or some other TCP port. Some
people would actually be prevented from visiting your site since not
everyone has free access to TCP port 446 on the internet (there is usually
no need to).

I hope I didn't complicate it too much :-)

Mike

[quoted text, click to view]

[quoted text, click to view]

We use a single IP and multiple ports internally, but externally we use
different IPs all using port 443. Ah, the wonders of the NAT. :-)

On another note it is a HEADACHE to keep all the IIS settings across the
multiple sites identical, especially in a farm. With 2 load balanced web
servers and 3 virtual web sites for our 3 SSL certs, I have to make a change
SIX TIMES to keep them all in sync.

If anyone has a better way to do this please enlighten me.

--Steve S.