IIS Server Security - Multiple Identities for one site.

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > October 2004 > Multiple Identities for one site.





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Multiple Identities for one site.
Kevin Antel

2004-10-19, 5:51 pm

We have an application running on one website. We want to co-brand it for
multiple names. Is it possible to put multiple SSL identities on one site?

ie:
http://www.site1.com
http://www.site2.com
http://www.site3.com

https://secure.site1.com
https://secure.site2.com
https://secure.site3.com

Is it safe to assume that I can do this, but I would need a unique IP for
each site? One Web, multiple IP's multiple SSL's?

Thanks.


Miha Pihler

2004-10-19, 5:51 pm

Hi Kevin,

You could setup 1 site for all unsecured content and assign it multiple
names using host header name.

For secure sites, I believe the best solution would be to setup one Web Site
on IIS for each of your secure site. On home folder tab you would point each
of these secure sites to same folder on hard drive (this way each secure web
site you create points to same content).

For each of your secure sites you will need 1 free IP address. Another (less
attractive method) is to use 1 IP but run each secure site on different TCP
port. This is not very practical since someone accessing secure site 3 would
have to enter https://secure.site3.com:446/ or some other TCP port. Some
people would actually be prevented from visiting your site since not
everyone has free access to TCP port 446 on the internet (there is usually
no need to).

I hope I didn't complicate it too much :-)

Mike

"Kevin Antel" <kevina@cqlcorp.com> wrote in message
news:OXxOIOgtEHA.3200@TK2MSFTNGP14.phx.gbl...
> We have an application running on one website. We want to co-brand it for
> multiple names. Is it possible to put multiple SSL identities on one

site?
>
> ie:
> http://www.site1.com
> http://www.site2.com
> http://www.site3.com
>
> https://secure.site1.com
> https://secure.site2.com
> https://secure.site3.com
>
> Is it safe to assume that I can do this, but I would need a unique IP for
> each site? One Web, multiple IP's multiple SSL's?
>
> Thanks.
>
>



Jeff Cochran

2004-10-19, 5:51 pm

On Tue, 19 Oct 2004 13:46:14 -0400, "Kevin Antel" <kevina@cqlcorp.com>
wrote:

>We have an application running on one website. We want to co-brand it for
>multiple names. Is it possible to put multiple SSL identities on one site?
>
>ie:
>http://www.site1.com
>http://www.site2.com
>http://www.site3.com
>
>https://secure.site1.com
>https://secure.site2.com
>https://secure.site3.com
>
>Is it safe to assume that I can do this, but I would need a unique IP for
>each site? One Web, multiple IP's multiple SSL's?


SSL needs a unique IP or port for each site. Ports are problematic
since they have to be specified on the URL, so separate IP's is the
norm.

Jeff
Steve S.

2004-10-29, 5:51 pm

> SSL needs a unique IP or port for each site. Ports are problematic
> since they have to be specified on the URL, so separate IP's is the
> norm.


We use a single IP and multiple ports internally, but externally we use
different IPs all using port 443. Ah, the wonders of the NAT. :-)

On another note it is a HEADACHE to keep all the IIS settings across the
multiple sites identical, especially in a farm. With 2 load balanced web
servers and 3 virtual web sites for our 3 SSL certs, I have to make a change
SIX TIMES to keep them all in sync.

If anyone has a better way to do this please enlighten me.

--Steve S.


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com