install multiple SSL sites on one VPS

You can install multiple SSL sites on one VPS and one IP. It goes well with chrome and and firefox, but not with IE (default setting). Under IE, the the second site's SSL will be mismatched.

I tried to fix this error by installing extra IPs. Each IP for different domain name. Still doesn't work.

Then I edit the conf file and added each IP to each domain name's port 443. It works!

Instead of "listen :443;", use ""listen 198.58.101.98:443;" Like this

listen 198.58.100.75:443;

server_name firstdomain.com;

listen 198.58.101.98:443;

server_name seconddomain.com;

I use nginx.

5 Replies

@Yifan:

It goes well with chrome and and firefox, but not with IE (default setting).
This is the result of varying support for Server Name Indication (SNI).

It'll be a few years yet until SNI is safe to use. 2014-2015, probably, since WinXP EOLs in 2014.

If it was just IE6, it'd be safe to use now (IE6's marketshare is well under 1% in most countries), but sadly SNI isn't supported at all by IE on WinXP, regardless of version.

No, it's not just IE6. I have IE9 on windows 7 and it still has problems if "Use TLS1.0 (1.1, 1.2)" options are not turned on.

Any browser will have problems if you turn off TLS, not just IE…

By default, under internet options,Use SSL 2.0 and Use SSL 3.0 are checked, TLS options are not checked. That's why IE has problems.

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct