Dynamo

2 replies to this thread. Most Recent

Todd

5 Jun 2015, 6:00 pm

SSL and Dedicated IP

I’m getting conflicting (confusing) information.

Is a dedicated IP always required for a SSL cert.? I’m being told it’s not required, although it is recommended for it to be “fully functional”, whatever that means.

Apparently this applies to both RapidSSL and GlobalSign 1-click.

waltd

5 Jun 2015, 7:14 pm

A wildcard certificate can (maybe) map to more than one IP address, but those are more expensive. Every time I have ever done one of these, I have always had either a single IP address for the server (and one certificate on the server) or at least one IP address for the virtual host (an additional IP, and a different Apache configuration than usual).

Walter

Freeway user since 1997

http://www.walterdavisstudio.com

Back to Top

Todd

5 Jun 2015, 7:24 pm

As I understand it that’s what the Server Name Indication is supposed to address, which can be beneficial for shared hosting. It’s an extension to the Transport Layer Security (TLS) protocol that enables servers to use multiple SSL certificates on one IP address. The only potential downside to SNI is that older browsers choke, but it’s widely accepted on most reasonably current browsers/OS.

Todd https://xiiro.com CREATiv {space} (coming soon)

On Jun 5, 2015, at 2:14 PM, waltd <[email protected]> wrote:

A wildcard certificate can (maybe) map to more than one IP address, but those are more expensive. Every time I have ever done one of these, I have always had either a single IP address for the server (and one certificate on the server) or at least one IP address for the virtual host (an additional IP, and a different Apache configuration than usual).

Walter