Hi again.

Can you have multiple sites with SSL certificates over a single webserver an just one WAN IP ?

The thing is that we have an IIS server (Microsoft) with a lot of websites but we cannot give more than one SSL per WAN IP. That means that no matter how much sites we have with SSL on the webserver, from outside always opens the first one that found and leave the other ones without access (Every time that we try to put https:// with any of the sites that are at that moment on the server with SSL certificates, it takes us to a same website)

We try to give virtual IP`s to each website and give each one of them a certificate but the problem goes on. Im not very sure, but i think i read once that it can only be one SSL certificate per WAN IP.
Its thats true, it means that i should have one certificate for each WAN IP (200.1.2.3 ==> SSL1, 200.1.2.4 ==> SSL 2, etc...) wich i think its not a very good idea.

We also try to give each site a diferent SSL port and for a time it works fine. The only problem was that the users must put the number of the port after the name of the site (example : https://www.myproblem.com:444) and with many users working behind firewalls outside the company, they couldnt reach the sites because their network administrator only allow SSL trafic on the standar 443 port.

I was thinking in use Apache to redirect some of the sites , but im still have a lots of doubts of how to use it.

Do i need more tools to do this or do you know a better way to do it ?

Thanks

Rockmanchile

Commonly in such a shared environment, all websites do indeed direct their SSL to the same host, and use the same certificate. The way this is done is to give each website its own subdirectory in the SSL environment, and the webmasters point their secure components at this subdirectory. On Apache, the webmasters may do this by either a direct link or by doing a rewrite using .htaccess. The rewrite has the advantage of not exposing the location of the subdirectory to the user in their browser; instead they put in https://yoursecuredomain.com/desiredpage and apache reroutes it to https://sharedsecureserver/yoursubdirectory/desiredpage.