As I understand it, this is the closest you can get. I think it has to
do with the concept of a secure certificate. You pay a third party
(like geocert) to verify that the connection is secure to a specific
company's website. I think this is supposed to prevent fraudulent sites
gaining info, but doubt it does much. What most companies do, is buy
their own certificate for www.site1.com and another for www.site2.com,
or use a shared certificate. A shared certificate means both
www.site1.com and www.site2.com use a url (for secure stuff) such as
https://www.sharedcert.com/www.site1.com/ and
https://www.sharedcert.com/www.site2.com/ .
This last case is how our website hosting service uses for our sites.
Maybe others would know more.
Sadhaka Jivanandanatha
On Jan 28, 2005, at 9:30 AM, Michael Larue wrote:
Friday, January 28, 2005
Hi Sadhaka,
Thanks for your reply!
There are different types of SSL certificates you can buy. The one
that
lets you use multiple sites on one machine is much more expensive and
has some limitations. You will see right away if you go to a place
like: http://www.geotrust.com/web_security/ to buy the certificate.
Would this be the "True BusinessID® Wildcard" certificate for $899?
As listed on the web site,
---------------------
Secure Multiple Sites with One Wildcard SSL Certificate
If you're looking to secure multiple websites with one server
certificate,
True BusinessID® Wildcard is the easy, affordable solution. True
BusinessID®
Wildcard can secure multiple fully qualified domains that share the
same
base domain name if they share one physical server.
For example, if you need to secure the following websites:
o www.yourdomain.com
o secure.yourdomain.com
o product.yourdomain.com
o info.yourdomain.com
o download.yourdomain.com
o anything.yourdomain.com
and all of these websites are hosted on the same server box, you can
purchase and install one Wildcard certificate issued to
*.yourdomain.com to
secure all these sites. The number of sub domains that you can use the
wildcard certificate to secure is unlimited, for example, the same
certificate can be used every time you add a new sub domain to
yourdomain.com. If you need to span the wildcard certificate across
multiple
physical servers, you may purchase additional licenses.
---------------------
Hmm, as you point out, it does have a pretty big restriction--you must
use a
"base" domain.
So what do people do with multihoming and SSL? I'm pretty sure
multihoming
doesn't require that you use a base domain, so what happens in this
case?
I dug around a little more, and came across the following info:
---------------------
http://www.itrus.com.cn/en/resource/datasheet/
Securing%20Multiple%20Web%20Se
rvers.pdf
Name-Based Virtual Hosting:
An ISP or Web Host provides each hosted customer with a unique domain
name,
such as customername.isp.com.
If the same certificate is used for each domain name, browsers will
indicate
that the site domain name does not match the common name in the
certificate.
To solve this problem, a “wildcard” certificate of the form *.isp.com
is
required to properly serve the multi-hostname configuration without
creating
browser mismatch error messages. (VeriSign offers wildcard
certificates on a
case-by-case basis, and they are subject to certain additional
licensing
terms and conditions. For more information, please contact
[EMAIL PROTECTED])
----------------------
So it seems you can't have a certificate for multiple domains on the
same
server without using a "base" domain?
This is probably a 4D issue (not Active4D), so I'll post this on the
4DNUG
list and see if anyone there might have the answer to this...
Again, thanks for your reply!
Michael Larue
_______________________________________________
Active4D-dev mailing list
[email protected]
http://mailman.aparajitaworld.com/mailman/listinfo/active4d-dev
Archives: http://mailman.aparajitaworld.com/archive/active4d-dev/
_______________________________________________
Active4D-dev mailing list
[email protected]
http://mailman.aparajitaworld.com/mailman/listinfo/active4d-dev
Archives: http://mailman.aparajitaworld.com/archive/active4d-dev/