Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

I try to setup SSL on my server for only one web site (I have few there using IIS7).

I bought an SSL certificate, installed it but when I come to bind I don't have to option to specify the host name. From reading some posts here I understood I need a distinct IP address.

I didn't purchase a wildcard certificate, I got staging.mydomain.com.

My question is:

  1. My server has a distinct IP, can I use it although I have other sites there but they don't need ssl?

  2. If I do need to buy dedicated IP. What does it involve?

share|improve this question

migrated from stackoverflow.com Jun 2 '11 at 16:01

This question came from our site for professional and enthusiast programmers.

add comment

3 Answers 3

up vote 2 down vote accepted

In answer to your question:

1 . My server has a distinct IP, can I use it although I have other sites there but they don't need ssl?

There is really no mucking about when it comes to SSL, your site will need its own IP address for a single domain SSL. There are various hacks and bodges I've seen people do over the years, they all end in tears.

2 . If I do need to buy dedicated IP. What does it involve?

If you're self hosting your server in an office/home at the end of a DSL or cable service then you need to ask your provider for a range of static IP addresses. If your server is rented from a hoster (RackSpace, Orcs etc) or it's your own hardware in a data-centre then you'd need to ask the hoster or IP transit provider for more IP addresses.

As to cost, this can vary from one-off payments of around $50 for a /29 (6 usuable addresses) to annual renting of an IP address of perhaps $10 per IP/per year. It will vary enormously from provider to provider.

One thing to note is that if you change DSL/Cable/Hosting/Transit provider - you can't take the IP addresses allocated with you. They are part of their larger allocation from a regional internet registry and "owned" by them.

share|improve this answer
    
Thank you Kev. I'm hosting my site on virtual server that I rent.Basically you say I must have dedicated IP and there is no way around it? –  UshaP Jun 2 '11 at 22:13
    
@ushap - what do you have just now? –  Kev Jun 2 '11 at 22:14
    
I have dedicated IP that is used for 3 sites. I need the ssl only for one of them. –  UshaP Jun 2 '11 at 22:21
    
@ushap - where is your server hosted? –  Kev Jun 2 '11 at 22:22
1  
You should be fine with a single IP address as long as you only have one SSL site and no other sites listening on port 443. –  GregS Jun 4 '11 at 12:35
show 4 more comments
  1. Yes. However since host headers are ignored for SSL, all SSL traffic, even those for other sites, will go to the site which supports SSL, since 443 will be bound to just one site.
  2. Then that certificate will only work for that domain.
  3. Contact your hosting provider / ISP.
share|improve this answer
    
Thanks vcsjones, I have my own server that i'm administrate.i guess if i have only one ssl i need then i don't care. –  UshaP Jun 2 '11 at 13:31
add comment

1) You can have multiple websites on the same machine. In apache, you can put in multiple virtual hosts with different webroots.

2) A normal certificate is only valid for example.com and www.example.com.

3) You do not neccesarilary need a static IP from your ISP. You can look into dynamic DNS with a provider such as dyndns. They'll give you a program to update your current IP with their dns records so your domain points to the right spot. However, that will cost money to use your own domain name.

share|improve this answer
    
Thanks Andrew. I'm using free.editdns.net to manage my domain.Do you know if I they support it? –  UshaP Jun 2 '11 at 14:11
    
@andrew - for anything more than a bit of home user use, suggesting dynamic DNS is a bad idea especially when SSL certificates are involved. –  Kev Jun 2 '11 at 15:34
    
@kev Dynamic DNS works fine with SSL –  GregS Jun 4 '11 at 12:33
    
@gregs - I didn't say that it didn't, I saying that if you're doing anything of any importance then Dynamic DNS isn't really a suitable, business class solution. –  Kev Jun 4 '11 at 12:56
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.