As I understand it, this is the closest you can get. I think it has to do with the concept of a secure certificate. You pay a third party (like geocert) to verify that the connection is secure to a specific company's website. I think this is supposed to prevent fraudulent sites gaining info, but doubt it does much. What most companies do, is buy their own certificate for www.site1.com and another for www.site2.com, or use a shared certificate. A shared certificate means both www.site1.com and www.site2.com use a url (for secure stuff) such as https://www.sharedcert.com/www.site1.com/ and https://www.sharedcert.com/www.site2.com/ .

This last case is how our website hosting service uses for our sites.

Maybe others would know more.

Sadhaka Jivanandanatha
On Jan 28, 2005, at 9:30 AM, Michael Larue wrote:

Friday, January 28, 2005

Hi Sadhaka,

Thanks for your reply!

There are different types of SSL certificates you can buy. The one that
lets you use multiple sites on one machine is much more expensive and
has some limitations. You will see right away if you go to a place
like: http://www.geotrust.com/web_security/ to buy the certificate.

Would this be the "True BusinessID® Wildcard" certificate for $899?

As listed on the web site,

---------------------

Secure Multiple Sites with One Wildcard SSL Certificate

If you're looking to secure multiple websites with one server certificate,
True BusinessID® Wildcard is the easy, affordable solution. True BusinessID®
Wildcard can secure multiple fully qualified domains that share the same
base domain name if they share one physical server.


For example, if you need to secure the following websites:

o www.yourdomain.com
o secure.yourdomain.com
o product.yourdomain.com
o info.yourdomain.com
o download.yourdomain.com
o anything.yourdomain.com

and all of these websites are hosted on the same server box, you can
purchase and install one Wildcard certificate issued to *.yourdomain.com to
secure all these sites. The number of sub domains that you can use the
wildcard certificate to secure is unlimited, for example, the same
certificate can be used every time you add a new sub domain to
yourdomain.com. If you need to span the wildcard certificate across multiple
physical servers, you may purchase additional licenses.


---------------------

Hmm, as you point out, it does have a pretty big restriction--you must use a
"base" domain.


So what do people do with multihoming and SSL? I'm pretty sure multihoming
doesn't require that you use a base domain, so what happens in this case?


I dug around a little more, and came across the following info:

---------------------

http://www.itrus.com.cn/en/resource/datasheet/ Securing%20Multiple%20Web%20Se
rvers.pdf


Name-Based Virtual Hosting:

An ISP or Web Host provides each hosted customer with a unique domain name,
such as customername.isp.com.


If the same certificate is used for each domain name, browsers will indicate
that the site domain name does not match the common name in the certificate.
To solve this problem, a “wildcard” certificate of the form *.isp.com is
required to properly serve the multi-hostname configuration without creating
browser mismatch error messages. (VeriSign offers wildcard certificates on a
case-by-case basis, and they are subject to certain additional licensing
terms and conditions. For more information, please contact
[EMAIL PROTECTED])


----------------------

So it seems you can't have a certificate for multiple domains on the same
server without using a "base" domain?


This is probably a 4D issue (not Active4D), so I'll post this on the 4DNUG
list and see if anyone there might have the answer to this...


Again, thanks for your reply!

Michael Larue

_______________________________________________
Active4D-dev mailing list
[email protected]
http://mailman.aparajitaworld.com/mailman/listinfo/active4d-dev
Archives: http://mailman.aparajitaworld.com/archive/active4d-dev/

_______________________________________________ Active4D-dev mailing list [email protected] http://mailman.aparajitaworld.com/mailman/listinfo/active4d-dev Archives: http://mailman.aparajitaworld.com/archive/active4d-dev/

Reply via email to