« Previous Next »

• 10-14-2009, 11:44 PM

  kpao2009 Joined on 10-15-2009, 3:29 AM Posts 8

  How to host two ssl sites with different domain and different IP? Reply Contact Suppose I have www.abc.com and www.def.com. Both two websites run 80 and 443 ports. And the websites use different ssl certificate. For 80 port, I can add host header for each website. But for SSL, it doesn't work. I have tried to use Metabase Explorer to add SecureBinding for each site. But something happend, sometimes I access https://www.abc.com. It will be redirected to https://www.def.com. Is it possible to do that?  P.S. My IIS version is 6.0 and running on windows 2003 server

• 10-15-2009, 12:50 AM

  In reply to

  lextm Joined on 10-22-2008, 4:18 AM Shanghai, PRC Posts 1,417

  Re: How to host two ssl sites with different domain and different IP? Reply Contact For HTTP sites, you can use host headers to distinguise them if they bind to the same IP address and port 80. However, for HTTPS/SSL though you can bind them to the same IP address and port 443 on IIS side using host headers, you will meet certificate issue. Please check out our recommendation here. http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/596b9108-b1a7-494d-885d-f8941b07554c.mspx?mfr=true A workaround is to bind the two sites to different IP addresses, but that requires networking related changes. Lex Li Support Engineer at Microsoft --------------------------- This posting is provided "AS IS" with no warranties, and confers no rights.

• 10-15-2009, 1:05 AM

  In reply to

  kpao2009 Joined on 10-15-2009, 3:29 AM Posts 8

  Re: How to host two ssl sites with different domain and different IP? Reply Contact I have already read this page before. But it still not work for me. May be I describe more clearly about my situation: I have two websites: www.abc.com (IP:202.175.10.10) www.def.com (IP:202.175.20.20) And those two websites have been installed two different ssl certificates. One is www.abc.com, another one is www.def.com. So, I'm not using wildcard certificate. and both two websites in different domains.

• 10-15-2009, 1:11 AM

  In reply to

  lextm Joined on 10-22-2008, 4:18 AM Shanghai, PRC Posts 1,417

  Re: How to host two ssl sites with different domain and different IP? Reply Contact OK, so you have already bind them to 202.175.10.10:443 and 202.175.20.20:443 separately. That eliminates a big roadblocker. Now we can download and install SSLDiag on to this server and check if it reports any errors on the certificates. x64 http://www.microsoft.com/downloads/details.aspx?familyid=1CBFB70E-F442-4BB2-940B-351C3A7D62CF&displaylang=en x86 http://www.microsoft.com/downloads/details.aspx?FamilyID=cabea1d0-5a10-41bc-83d4-06c814265282&DisplayLang=en If the misbehavior remains even if SSLDiag reports no issue, that means the problem does not originate from SSL settings. Lex Li Support Engineer at Microsoft --------------------------- This posting is provided "AS IS" with no warranties, and confers no rights.

• 10-15-2009, 3:47 AM

  In reply to

  ganeshanekar Joined on 11-14-2006, 7:29 PM India Posts 532

  Re: How to host two ssl sites with different domain and different IP? Reply Contact kpao2009: I have two websites: www.abc.com (IP:202.175.10.10) www.def.com (IP:202.175.20.20) And those two websites have been installed two different ssl certificates. One is www.abc.com, another one is www.def.com. So, I'm not using wildcard certificate. and both two websites in different domains. If you have two different IPs and have bound the different certs to those, the SSL configuration looks good. What is the problem that you are facing? Can you provide more information on that? ~ Ganesh

• 10-15-2009, 6:35 AM

  In reply to

  tomkmvp Joined on 03-20-2003, 6:27 AM Central NJ Posts 6,238	Re: How to host two ssl sites with different domain and different IP? Reply Contact You may also need to disable socket pooling. http://support.microsoft.com/kb/238131 Tom Kaminski IIS MVP http://mvp.support.microsoft.com/ http://blogs.iis.net/tomkmvp/ http://www.linkedin.com/pub/8/690/408 http://www.bluesrepublic.org/

• 10-27-2009, 5:55 AM

  In reply to

  kpao2009 Joined on 10-15-2009, 3:29 AM Posts 8	Re: How to host two ssl sites with different domain and different IP? Reply Contact I have tried using SSLDiag. And there is a error message "#WARNING:Site 1 and 1588487336 have conflicting SecureBindings".

• 10-27-2009, 10:30 AM

  In reply to

  tomkmvp Joined on 03-20-2003, 6:27 AM Central NJ Posts 6,238	Re: How to host two ssl sites with different domain and different IP? Reply Contact ... so double-check each site configuration to make sure they are unique ... Tom Kaminski IIS MVP http://mvp.support.microsoft.com/ http://blogs.iis.net/tomkmvp/ http://www.linkedin.com/pub/8/690/408 http://www.bluesrepublic.org/

• 10-27-2009, 10:54 PM

  In reply to

  kpao2009 Joined on 10-15-2009, 3:29 AM Posts 8

  Re: How to host two ssl sites with different domain and different IP? Reply Contact   I have checked the configuration. the binding is correct and no duplication. The following is the screen  site 1588487336:  http://img30.imageshack.us/img30/1263/site2js.jpg  http://img264.imageshack.us/img264/7763/site2conf.jpg site 1: http://img39.imageshack.us/img39/6889/site1r.jpg  http://img248.imageshack.us/img248/6843/site1conf.jpg   Anyway, both two websites use different certificates

• 10-28-2009, 10:31 AM

  In reply to

  tomkmvp Joined on 03-20-2003, 6:27 AM Central NJ Posts 6,238	Re: How to host two ssl sites with different domain and different IP? Reply Contact tomkmvp: You may also need to disable socket pooling. http://support.microsoft.com/kb/238131 What about this?  I did not see your response. Tom Kaminski IIS MVP http://mvp.support.microsoft.com/ http://blogs.iis.net/tomkmvp/ http://www.linkedin.com/pub/8/690/408 http://www.bluesrepublic.org/

• 10-28-2009, 10:34 AM

  In reply to

  ganeshanekar Joined on 11-14-2006, 7:29 PM India Posts 532	Re: How to host two ssl sites with different domain and different IP? Reply Contact Duplicate post

• 10-28-2009, 10:36 AM

  In reply to

  ganeshanekar Joined on 11-14-2006, 7:29 PM India Posts 532

  Re: How to host two ssl sites with different domain and different IP? Reply Contact I reviewed the images that you posted. It seems there is problem with your site bindings. In IIS, on the site, go to properties>under website tab, you will see Advanced button, Click on that and ensure the sites are bound to specific IP address instead of "All unassigned" in multiple SSL identities. That should fix this issue. HTH. ~ Ganesh

• 10-28-2009, 10:49 AM

  In reply to

  tomkmvp Joined on 03-20-2003, 6:27 AM Central NJ Posts 6,238

  Re: How to host two ssl sites with different domain and different IP? Reply Contact ganeshanekar: Click on that and ensure the sites are bound to specific IP address instead of "All unassigned" in multiple SSL identities. That should fix this issue. Yes that should fix it. Tom Kaminski IIS MVP http://mvp.support.microsoft.com/ http://blogs.iis.net/tomkmvp/ http://www.linkedin.com/pub/8/690/408 http://www.bluesrepublic.org/

• 10-28-2009, 9:33 PM

  In reply to

  kpao2009 Joined on 10-15-2009, 3:29 AM Posts 8

  Re: How to host two ssl sites with different domain and different IP? Reply Contact I have tried disable the socket pooling. The problem was still happened. Anyway, I created the website named ASPNET in my website 1588487336. And access to that page. And the error occurred. The error message is  "Server cannot access application directory 'C:\inetpub\wwwroot\ASPNET\'. The directory does not exist or is not accessible because of security settings." . It's strange. Because the correct path is C:\Inetpub\wwwroot2\ASPNET\. "C:\Inetpub\wwwroot\" is the parent path of website 1.

• 10-28-2009, 9:47 PM

  In reply to

  qbernard Joined on 03-25-2003, 10:12 PM Malaysia Posts 3,229	Re: How to host two ssl sites with different domain and different IP? Reply Contact Err is this SSL error ? it looks like path referencing error, you getting 404 ? what's the complete status code for the request? Will you able to start up both sites? I mean it binds to respective port 80 and 443?   Cheers, Bernard Cheah