Re: SSL certificates and virtual hosts

[Yehuda Katz <yehuda@xxxxxxxxxx>]

On Tue, Oct 18, 2011 at 12:33 PM, Greg Fennell <fennellgb@xxxxxxxxxxxxx> wrote:

You can only have 1 SSL per IP address.  You would need to get a 2nd IP address on your server for a 2nd SSL.

You could also try SNI. It is not supported by some old browsers.

Browsers/clients with support for TLS server name indication:

• Opera 8.0 and later (the TLS 1.1 protocol must be enabled)

• Internet Explorer 7 or later (under Windows Vista and later only, not under Windows XP)

• Firefox 2.0 or later

• Curl 7.18.1 or later (when compiled against an SSL/TLS toolkit with SNI support)

• Chrome 6.0 or later (on all platforms - releases up to 5.0 only on specific OS versions)

• Safari 3.0 or later (under OS X 10.5.6 or later and under Windows Vista and later)

You can find information about how it works at https://sni.velox.ch/ 

Apache 2.2.12 is the first official release the supports SNI.

You can find Apache configuration information here: http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI