https with multiple certs on one IP

Hanno's Blog

Wednesday, October 24. 2007

https with multiple certs on one IP


Trackbacks

No Trackbacks

Comments
Display comments as (Linear | Threaded)

One certificate can be good for multiple DNS names, using the X.509 SubjectAltName extension. Modern browsers already support this.
The CA has to support it as well. (CAcert does.)
#1 chithanh (Homepage) on 2007-10-25 11:56 (Reply)
Yeah, we already used that in the past. It's a »works, but ugly«-solution. It would mean that for every new customer we'd need to re-create the certificated.
Also from the sense of certificates, a cert should authenticate the owner of a page, not the admin of the server where the page is located. So I much prefer the SNI-solution.
#1.1 Hanno (Homepage) on 2007-10-25 12:48 (Reply)

Add Comment

E-Mail addresses will not be displayed and will only be used for E-Mail notifications.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

 
 

About

This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0.

You can find my web page with links to my work as a journalist here.

I am also publishing a newsletter about climate change and decarbonization technologies.

The blog uses the free software Serendipity and is hosted at schokokeks.org.

Hanno on Mastodon | Contact / Imprint | Privacy / Datenschutz