Apache SSL – Multiple Certificates on a Single IP

Posted by & filed under Linux, Server.

Setting up multiple SSL Certificates on a single IP address is possible, and acceptable on nearly all browsers, thanks to Server Name Identification (SNI).

https for markflint.net

SNI sends a site visitor the certificate that matches the requested server name – great! No more need to buy extra IP addresses.

I set this up on a Ubuntu 12.04 server and it was quite straightforward. The process I followed was:
1) set up the server and virtual hosts (see first link below)
2) generate a certificate request (CSR) (see second link below) – make sure you include www. before the domain name
3) go over to https://cheapsslsecurity.com and buy a RapidSSL for about £5.
— there is a process whereby they email you a link to generate your certificate
— to generate your cert you need the CSR you created earlier
— NB: for ‘verification’ you won’t be able to use the email address you get the certificate mailed to, so I chose to use ‘file verification’ where I uploaded a file to the server to verify
— Also note, if you included www. in the domain name while creating the CSR your cert with cover both with or without www.

https://www.digitalocean.com/community/articles/how-to-set-up-multiple-ssl-certificates-on-one-ip-with-apache-on-ubuntu-12-04

This first reference is great for understanding SNI and how to set up your virtual hosts for multiple SSL. Note, this link is for a self-signed cert, so you need to generate a request (CSR) instead… see next link:

http://viralsolani.wordpress.com/2013/02/07/how-to-install-ssl-certificates-with-apache-2-on-ubuntu-12-04/

Also for further cross-references:
http://www.seleads.com/webmastering/how-to-ssl-ubuntu-12-04-apache-2-22/
https://library.linode.com/web-servers/apache/ssl-guides/ubuntu-12.04-precise-pangolin#sph_install-a-commercial-ssl-certificate

Leave a Reply

  • (will not be published)

XHTML: You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

Bitnami