SSL WildCard with IIS 5.0, Single IP and multiples sites
Possible ? Yes, yes and YES.... I mean in a 'cheating' way... I got this query recently -
----
Hi,
Is possible use a WildCard with *.mydomain.com to host differents customers web sites with single IP and IIS 5.0 ?
Example:
http://www.customer1.com - only http
http://www.customer2.com - only http
http://www.customer3.com - only http
https://customer1.mydomain.com - with https
https://customer2.mydomain.com - with https
https://customer3.mydomain.com - with https
In my case all https hosts are opening the same web page.
thanks.
----
Now, How I tested:
II5, 1 IP Address, 1 Wildcard *.killme.com cert :)
4 websites -
Default - which is the default site - obviously.
a.killme.com
b.killme.com
c.killme.com
---------
Install certsvr 2.0 and apply a *.killme.com and installed at a.killme.com with binding at port 443. and you will got 0.0.0.0:443 when you do a 'netstat -an' indicating that the port 443 is binding at all interfaces.
And now, when you browse http default site + a.killme.com, everything works, as this is just pure http host header requests get directed to relevant site. Then https://a.killme.com - works. as the cert is binding at the site.... then the magic part - https://b.killme.com - works! why? well, actually it requested the cert at a.killme.com, but since this is a wildcard cert, you will not get any browser prompt and you got https with b.killme.com, as well as c.killme.com
With IIS 6 (w2k3 sp1) - you are able to specific host header with SSL in a way. but then the catch is it needs wildcard cert of the same particular parent domain. e.g. *.killme.com
Anyway - don't think Microsoft support this. so again try this at your own risk.