IIS Server Security - One Domain with 2 websites and 2 SSL Certs

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > May 2006 > One Domain with 2 websites and 2 SSL Certs





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author One Domain with 2 websites and 2 SSL Certs
Word problems

2006-05-22, 1:20 am

Greetings All,

I am running a Win2003 SBS Standard server. I have 2 websites running on the
server in the same domain. I have added a second IP to the server and
assigned each website an IP address. I have also created separate SSL certs
for each website and enabled port 443 for both. I have a Linksys router which
I enabled port forwarding for port 443.

The problem I am having is that when I go to https://website1.mydomain.com
I get the SSL cert for the 2nd website (and that website). If I go to
https://website2.mydomain.com I get SSL cert for the 2nd website and that
website.

How do I configure things so that when that when I go to site1 I get site1
with cert1 and when I go to site2 I cert 2.

Also how would I go about redirecting a url request for
http://website1.mydomain.com to https://website1.mydomain.com automatically?

Thanks in advance for your help.

Ken Schaefer

2006-05-22, 1:20 am

What IP address do website1.mydomain.com and website2.mydomain.com point to?
I suspect that they both point to the same address: the public IP address
assigned to your Linksys NAT device.

Then, how does your Linksys NAT device know that certain requests need to be
forwarded to internal IP address number 1, and other requests need to be
forwarded to internal IP address number 2? It doesn't, unless you have two
public IP addresses, and port forward each one to the requisite internal IP
address.


Cheers
Ken


"Word problems" <Wordproblems@discussions.microsoft.com> wrote in message
news:C8E24BEB-B2C3-4847-B923-73F1B31A6C42@microsoft.com...
> Greetings All,
>
> I am running a Win2003 SBS Standard server. I have 2 websites running on
> the
> server in the same domain. I have added a second IP to the server and
> assigned each website an IP address. I have also created separate SSL
> certs
> for each website and enabled port 443 for both. I have a Linksys router
> which
> I enabled port forwarding for port 443.
>
> The problem I am having is that when I go to https://website1.mydomain.com
> I get the SSL cert for the 2nd website (and that website). If I go to
> https://website2.mydomain.com I get SSL cert for the 2nd website and that
> website.
>
> How do I configure things so that when that when I go to site1 I get site1
> with cert1 and when I go to site2 I cert 2.
>
> Also how would I go about redirecting a url request for
> http://website1.mydomain.com to https://website1.mydomain.com
> automatically?
>
> Thanks in advance for your help.
>



Word problems

2006-05-22, 1:15 pm

Ken,
Thank you for your response. You are correct. I have 2 internal IP's and 1
Public IP. So If I undertand you correctly there's no way around it other
than getting a second public IP?

Thanks again.

"Ken Schaefer" wrote:

> What IP address do website1.mydomain.com and website2.mydomain.com point to?
> I suspect that they both point to the same address: the public IP address
> assigned to your Linksys NAT device.
>
> Then, how does your Linksys NAT device know that certain requests need to be
> forwarded to internal IP address number 1, and other requests need to be
> forwarded to internal IP address number 2? It doesn't, unless you have two
> public IP addresses, and port forward each one to the requisite internal IP
> address.
>
>
> Cheers
> Ken
>
>
> "Word problems" <Wordproblems@discussions.microsoft.com> wrote in message
> news:C8E24BEB-B2C3-4847-B923-73F1B31A6C42@microsoft.com...
>
>
>

Funkadyleik Spynwhanker

2006-05-22, 1:15 pm


"Word problems" <Wordproblems@discussions.microsoft.com> wrote in message
news:F1C5D9D7-E6DB-4B8F-BC10-205375187729@microsoft.com...
> Ken,
> Thank you for your response. You are correct. I have 2 internal IP's and 1
> Public IP. So If I undertand you correctly there's no way around it other
> than getting a second public IP?
>
> Thanks again.


Correct. None.


Ken Schaefer

2006-05-23, 1:16 am

You can get a wild card certificate that matches *.mydomain.com (these tend
to be quite expensive though).

Or you can get second public IP address

Or you have port forward different ports, eg https://publicIPaddress ->
internal IP 1, and https://publicIPaddress:444 -> internal IP 2

Cheers
Ken

"Word problems" <Wordproblems@discussions.microsoft.com> wrote in message
news:F1C5D9D7-E6DB-4B8F-BC10-205375187729@microsoft.com...[vbcol=seagreen]
> Ken,
> Thank you for your response. You are correct. I have 2 internal IP's and 1
> Public IP. So If I undertand you correctly there's no way around it other
> than getting a second public IP?
>
> Thanks again.
>
> "Ken Schaefer" wrote:
>


Rich Raffenetti

2006-05-29, 5:30 pm

Your request for http://website1.mydomain.com will generate a 403.4 error.
Replace the default error htm file for your site with a custom error htm
file that redirects to https://website1.mydomain.com. The following should
work ok for you. The error files are in %windir%\help\iishelp\common

<html>
<head>
<meta http-equiv="refresh" content="0;url=https://website1.mydomain.com">
</head>
</html>


"Word problems" <Wordproblems@discussions.microsoft.com> wrote in message
news:C8E24BEB-B2C3-4847-B923-73F1B31A6C42@microsoft.com...
> Greetings All,
>
> I am running a Win2003 SBS Standard server. I have 2 websites running on
> the
> server in the same domain. I have added a second IP to the server and
> assigned each website an IP address. I have also created separate SSL
> certs
> for each website and enabled port 443 for both. I have a Linksys router
> which
> I enabled port forwarding for port 443.
>
> The problem I am having is that when I go to https://website1.mydomain.com
> I get the SSL cert for the 2nd website (and that website). If I go to
> https://website2.mydomain.com I get SSL cert for the 2nd website and that
> website.
>
> How do I configure things so that when that when I go to site1 I get site1
> with cert1 and when I go to site2 I cert 2.
>
> Also how would I go about redirecting a url request for
> http://website1.mydomain.com to https://website1.mydomain.com
> automatically?
>
> Thanks in advance for your help.
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com