Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Multiple SSL Certs on Different Portals w/ IIS 6Multiple SSL Certs on Different Portals w/ IIS 6
Previous
 
Next
New Post
6/11/2007 7:11 PM
 

In IIS 6.0, we are trying to set up a DNN installation where each portal is secured with a different security certificate.   Our first portal is assigned as a separate IIS website, uses the same I.P., port 80 and ssl port 443,  and uses it's OWN host headers.   We then installed the first certificate for site1.com and it worked fine.

We then set up a second portal, as a second IIS website with the same I.P., port 80 and ssl port 443, but with DIFFERENT host headers.   We installed the security certificate for site2.com, but it is reading the certificate for site1.com.  

Has anyone successfully setup a multiple portal DNN installation that uses a different SSL cert on each portal?   It will be infeasible for us to user a separate IP address for each portal.

 

 
New Post
6/11/2007 7:28 PM
 

One rule about SSL certificates in IIS is that you either need a different IP or a different port so that you can set them up on seperate IIS websites.  You can't use Host Headers in IIS to get two different SSL certs.

You probably don't want a different Port than the default (443) so you are going to have to use different IP addresses unless your sites/portals share the same SSL certificate.


DotNetNuke Modules from Snapsis.com
 
New Post
6/11/2007 8:12 PM
 

It seems that as acquiring a unique IP address for every site could be difficult, wouldn't using a different port be more beneficial?  Are there any drawbacks to using different ports for every IIS website?

 
New Post
6/11/2007 9:10 PM
 

We've now tried creating another website using the same IP, and same port, but with a different host header, ssl port and security cert, but it still seems to be reading the security certification of the first website.   Is it required that a single certification be assigned to a single IP?  Any other ideas?

 
New Post
6/11/2007 9:45 PM
 

The requirement is that you can only have one SSL certificate assigned to a single IP address & Port combination. 

The web server listens on a specific port for incoming traffic, and then depending on what certificate is assigned, that is the one it will use.

If you assigned two different IIS websites to the same IP address and port then one is not working.  
Once the port is opened on an IP then no other sites can open the same port on that IP.

I mentioned earlier that you can not do it with Host Headers. I hope that part is clear.

The problem with using different ports is that you will have to send users to a url that has that port in it (eg https://www.yoursite.com:444).  
Not that it can't be done, but you just have to be real careful to make sure you are on the right port.


DotNetNuke Modules from Snapsis.com
 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Multiple SSL Certs on Different Portals w/ IIS 6Multiple SSL Certs on Different Portals w/ IIS 6


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out