Newbie: SSL on Host Header web site?

Hello,

I have created a new web site based on Host header (example:
www.mysite2.com) and with the same IP as the "Default Web Site" (example:
www.mysite1.com).
Default web site is already configured with is own SSL certificate on port
443
I have a new SSL certificate for my new site that I wish to install but I
understand that I can't use the same port of 443 so I have set a port of 450
to www.mysite2.com

Problem is that it does not work and I can’t access my new web site with
SSL.

Thanks in advanced for any advice,
Asaf

Re: Newbie: SSL on Host Header web site?

You cant.

For an SSL site you need ALL of the following: unique virtual web, unique
IP address, unique hostname.

You need more IPs if you want more hostnames with SSL.

Host headers are processed in the HTTP 1.1 header and that determines the
site to use by IIS. But in SSL mode, that part is encrypted, so the server
has no way of telling what site it is for and will just dump you on the
default one and the browser will throw an error.

"Asaf" wrote in message
news:e8%23XX1qXIHA.1188@TK2MSFTNGP04.phx.gbl...
> Hello,
>
> I have created a new web site based on Host header (example:
> www.mysite2.com) and with the same IP as the "Default Web Site" (example:
> www.mysite1.com).
> Default web site is already configured with is own SSL certificate on port
> 443
> I have a new SSL certificate for my new site that I wish to install but I
> understand that I can't use the same port of 443 so I have set a port of
> 450 to www.mysite2.com
>
> Problem is that it does not work and I can't access my new web site with
> SSL.
>
> Thanks in advanced for any advice,
> Asaf
>

Re: Newbie: SSL on Host Header web site?

Hi,

Thanks for the info.


".._.." <.._..@yourmom.mil> wrote in message
news:St7mj.41880$G23.1338@newsreading01.news.tds.net...
> You cant.
>
> For an SSL site you need ALL of the following: unique virtual web, unique
> IP address, unique hostname.
>
> You need more IPs if you want more hostnames with SSL.
>
> Host headers are processed in the HTTP 1.1 header and that determines the
> site to use by IIS. But in SSL mode, that part is encrypted, so the
> server has no way of telling what site it is for and will just dump you on
> the default one and the browser will throw an error.
>
> "Asaf" wrote in message
> news:e8%23XX1qXIHA.1188@TK2MSFTNGP04.phx.gbl...
>> Hello,
>>
>> I have created a new web site based on Host header (example:
>> www.mysite2.com) and with the same IP as the "Default Web Site" (example:
>> www.mysite1.com).
>> Default web site is already configured with is own SSL certificate on
>> port 443
>> I have a new SSL certificate for my new site that I wish to install but I
>> understand that I can't use the same port of 443 so I have set a port of
>> 450 to www.mysite2.com
>>
>> Problem is that it does not work and I can't access my new web site with
>> SSL.
>>
>> Thanks in advanced for any advice,
>> Asaf
>>
>
>

Re: Newbie: SSL on Host Header web site?

Hi Asaf,

Just some supplement:

If your SSL web sites are located on same domain,

For example: https://www.domain.com and https://mail.domain.com

then we do support to setup a wildcard certificate(the CN should be
*.domain.com) on these sites and use host headers(www.domain.com and
mail.domain.com) to identify the sites as http - they can share the same IP
and SSL port.

The detailed information can be found at the following link:

Configuring SSL Host Headers
http://technet2.microsoft.com/windowsserver/en/library/1032c 063-e372-4875-9a
31-d6de8e1e87921033.mspx?mfr=true

If you have any further question, please don't hesitate to update here.

Have a great weekend.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

==================================================

Get notification to my posts through email? Please refer to:
http://msdn.microsoft.com/subscriptions/managednewsgroups/de fault.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at:

http://msdn.microsoft.com/subscriptions/support/default.aspx .

==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

Re: Newbie: SSL on Host Header web site?

Hi Asaf,

Just want to check if you still have any question regarding to this topic?

Have a great day.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

==================================================

Get notification to my posts through email? Please refer to:
http://msdn.microsoft.com/subscriptions/managednewsgroups/de fault.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at:

http://msdn.microsoft.com/subscriptions/support/default.aspx .

==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.