Re: [WebDNA] [OT] Multiple SSL certs on same server?

This WebDNA talk-list message is from

2014

It keeps the original formatting. numero = 111516
interpreted = N
texte = --Apple-Mail=_1F910DCF-8016-4408-BF77-48CD056C4FEAContent-Transfer-Encoding: quoted-printableContent-Type: text/plain;charset=us-asciiWe are using SNI on Apache to serve our SSL, rather than the standard =method of 1 x SSL per ip address. SNI allows for multiple SSLs on the =one IP address.=20Supported BrowsersSSL support with SNI on shared IP addresses requires that the user's =browser supports SNI. Most modern web browsers support it (e.g., IE 7 =and above, Firefox, Opera, and Chrome).=20However, there are a few outlier exceptions:Any Internet Explorer browser on Windows XPChrome 5 and older on Windows XPBlackberry web browserWindows Mobile phones up to version 6.5Android mobile phone default browser on Android OS 2.xMost of these exceptions are found when the end-user is running software =that is incredibly out of date.=20=http://www.digicert.com/ssl-support/apache-multiple-ssl-certificates-using=-sni.htmThe trick is to get the correct certificate.I used Multi-Domain SSL to get the job done:=https://www.namecheap.com/security/ssl-certificates/organization-validatio=n.aspxRegardsStuart TremainIDFK Web DevelopmentsAUSTRALIAwebdna@idfk.com.auOn 8 Aug 2014, at 9:59 am, Dan Strong wrote:> SNI?>=20> ------------------------------------> Sent from phone>=20> -Dan Strong> http://DanStrong.com>=20> On Aug 7, 2014 4:28 PM, "Stuart Tremain" wrote:> Hey Dan>=20> I got this going on a recent Ubuntu 12.04 install.>=20> Regards>=20> Stuart Tremain> IDFK Web Developments> AUSTRALIA> webdna@idfk.com.au>=20>=20>=20>=20> On 8 Aug 2014, at 4:56 am, Dan Strong wrote:>=20>> Anybody have experience with SNI?>> https://en.wikipedia.org/wiki/Server_Name_Indication#Support>>=20>> Seems like a great solution if older browser compatibility isn't =desired.>>=20>> Multiple IPs on same server will obviously work, but SNI looks =intriguing.>>=20>> -Dan Strong>> http://DanStrong.com>> --------------------------------------------------------- This =message is sent to you because you are subscribed to the mailing list . =To unsubscribe, E-mail to: archives: =http://mail.webdna.us/list/talk@webdna.us Bug Reporting: =support@webdna.us>=20> --------------------------------------------------------- This message =is sent to you because you are subscribed to the mailing list . To =unsubscribe, E-mail to: archives: =http://mail.webdna.us/list/talk@webdna.us Bug Reporting: =support@webdna.us> --------------------------------------------------------- This message =is sent to you because you are subscribed to the mailing list . To =unsubscribe, E-mail to: archives: =http://mail.webdna.us/list/talk@webdna.us Bug Reporting: =support@webdna.us--Apple-Mail=_1F910DCF-8016-4408-BF77-48CD056C4FEAContent-Transfer-Encoding: quoted-printableContent-Type: text/html;charset=us-ascii

We are using SNI on Apache to serve our SSL, =rather than the standard method of 1 x SSL per ip address. SNI allows =for multiple SSLs on the one IP =address.

 

Supported Browsers

SSL =support with SNI on shared IP addresses requires that the user's browser =supports SNI. Most modern web browsers support it (e.g., IE 7 and above, =Firefox, Opera, and Chrome). 

However, there are a few =outlier exceptions:

Any Internet Explorer browser on Windows =XP

Chrome 5 and older on Windows XP

Blackberry web =browser

Windows Mobile phones up to version =6.5

Android mobile phone default browser on Android OS =2.x

Most of these exceptions are found when the end-user is =running software that is incredibly out of =date. 

http://www.digicert.com/ssl-support/apache-multiple-ssl-=certificates-using-sni.htm

The trick is to =get the correct certificate.

I used =Multi-Domain SSL to get the job done:

https://www.namecheap.com/security/ssl-certificates/organi=zation-validation.aspx



Regards

Stuart =Tremain

IDFK Web Developments

AUSTRALIA

webdna@idfk.com.au





On 8 Aug 2014, at 9:59 am, Dan Strong <dan@danstrong.com> =wrote:

SNI?

------------------------------------
Sent from phone

-Dan Strong
http://DanStrong.com



On Aug 7, 2014 4:28 PM, "Stuart Tremain" =<webdna@idfk.com.au> =wrote:



Hey Dan

I got =this going on a recent Ubuntu 12.04 install.





Regards

Stuart Tremain

IDFK Web =Developments

AUSTRALIA

webdna@idfk.com.au





On 8 Aug 2014, at 4:56 am, Dan Strong <dan@danstrong.com> wrote:

Anybody have experience with =SNI?



https://en.wikipedia.org/wiki/Server_Name_Indication#Sup=port



Seems like a great solution if older browser compatibility isn't =desired.

Multiple IPs on same server will =obviously work, but SNI looks intriguing.

-Dan Strong

http://DanStrong.com



---------------------------------------------------------This message is sent to you because you are subscribed tothe mailing list .To unsubscribe, E-mail to: archives: http://mail.webdna.us/list/talk@webdna.usBug Reporting: support@webdna.us

---------------------------------------------------------This message is sent to you because you are subscribed tothe mailing list .To unsubscribe, E-mail to: archives: http://mail.webdna.us/list/talk@webdna.usBug Reporting: support@webdna.us