Just wondering about multiple website SSL certificates

golowenow · 2007-07-05T04:44:51+00:00

I run X2 with 2 completely different websites. In other words two separate domains. Am wondering if the new version of Abyss will support multiple SSL certif...

golowenow

Do you have a link on information about this workaround?

TRUSTAbyss

No, but Aprelium could probably point you to the right website. Sorry, but I'm not sure what to search for, I just heard about it from Aprelium.

aprelium-beta

golowenow wrote
Do you have a link on information about this workaround?

There is no workaround. If a server is going to have virtual SSL certificates support, this support must be hard wired inside it.
A server with that feature will not be able to work correctly with a browser that does not support it. So as explained above, we're not going to add it unless current browsers start supporting it at a wide scale.
Once again, this limitation is set by the SSL protocol and all web servers are affected by it. Please refer to http://en.wikipedia.org/wiki/Virtual_hosting for more information. For the advanced technical description of that feature, please refer to "Server Name Indication" section in http://tools.ietf.org/html/rfc4366#page-9 (this document describes the low level TLS protocol and assumes SSL/TLS internal knowledge).

Ian McPherson

Hi,
Multi-domain SSL certificates could overcome these limitations, yes? GoDaddy offer certificates that can cover up to 100 domains, although I can't admit to being anything like that organised, as yet... :)
https://www.godaddy.com/gdshop/ssl/ssl.asp?ci=8979
Ian

aprelium

Ian McPherson wrote
Multi-domain SSL certificates could overcome these limitations, yes?
Ian

Yes it can. Actually, a multi-domain certificate is a single certificate which is valid for more than one host name. Being a single certificate, it does not cause any problems (as those explained above).

Ian McPherson

I have never purchased one of these certificates before. Do you have to have all the domains worked out in advance, or can you add domains to the certificate over time?
Thanks,
Ian

aprelium

Ian McPherson wrote
I have never purchased one of these certificates before. Do you have to have all the domains worked out in advance, or can you add domains to the certificate over time?

It depends on the policy of the certificate signing authority. Ask them if they couldreissue updated certificates in such a case? Most of them do it if you change your details within the year or two of validity, so it's possible from a technical point of view.

etorvinen

I have found http://cert.startcom.org/ they provide free ssl certs...
i did not verify that the certs work.. yet...

aprelium

etorvinen wrote
I have found http://cert.startcom.org/ they provide free ssl certs...

Thank you for sharing that with us.

etorvinen

I signed up for startcom.
I have a ssl.csr and ssl.key file.
I successfull imported the key in abyss but can't figure out how to import the actual cert file. "ssl.csr"
As you can see startcom provides lots of certs
Quoted from thier site.

StartCom CA Certificates
If you want to import one or more CA certificates into your browser click on the link of the certificate in question. Make sure to edit the trust settings of each imported certificate.
In order to save the certificates for your server, select the link by right clicking on it and selecting "Save Link As..." from the menu.
StartCom Root CA (PEM encoded)
StartCom Root CA (DER encoded)
Server Certificate Bundle with CRLs (PEM encoded)
Class 1 Intermediate Server CA
Class 2 Intermediate Server CA
Class 3 Intermediate Server CA
Extended Validation Server CA
Class 1 Intermediate Client CA
Class 2 Intermediate Client CA
Class 3 Intermediate Client CA
Extended Validation Client CA
Class 2 Code Signing CA
Class 3 Code Signing CA

I guess the question is how to I combine these to fit in
Main Certificate - i believe this is the ssl.csr startcom generated for me.
Intermediate Certificate - ? In question...
CA Root Certificate - ? In question...
(in the abyss console)

etorvinen

Ok figured it out...
Server Certificate Bundle with CRLs (PEM encoded) - use for CA ROOT
Combinded all these in one file. then pasted it in the intermedate.
Class 1 Intermediate Server CA
Class 2 Intermediate Server CA
Class 3 Intermediate Server CA
Extended Validation Server CA
Class 1 Intermediate Client CA
Class 2 Intermediate Client CA
Class 3 Intermediate Client CA
Extended Validation Client CA
Class 2 Code Signing CA
Class 3 Code Signing CA
Main Cert - You have to login to thier site and have them generate a cert from the ssl.csr file. Then use the generated certifate.

« Previous Page