[FX.php List] [OFF] Basic SSL & DNS clarification

[Steve Winter]

Unless you have a wildcard cert… which if you don't need EV and given the cost of certs has come down significantly is a relatively cost-effective approach these days…


> One note though: this will NOt work:
> 
> https://www.domain.com
> 
> will not work with abc.domain.com certificate... it looks at both subdomain and domain, and the top-level domain too (.com, etc.).
> 
> 
> 
> 
> On Feb 14, 2013, at 8:56 PM, Bob Patin <bob at patin.com> wrote:
> 
>> Actually, assuming your example is what you're going to use, you can use the same cert for both.
>> 
>> The cert doesn't care about folders; you can use this:
>> 
>> https://abc.domain.com/apples/index.php
>> 
>> and also use it for
>> 
>> https://abc.domain.com/oranges/index.php
>> 
>> Same cert. 
>> 
>> I do it all the time, in fact; I have an SSL cert for each of my servers, that clients can then hook into, for example:
>> 
>> https://ssl7.longtermsolutions.com/joeclient/index.php
>> or
>> https://ssl7.longtermsolutions.com/susieclient/index.htm
>> 
>> Same cert...
>> 
>> If you only want one cert on the server, you don't need to use a 2nd IP address, but I usually do anyway. 
>> 
>> I HIGHLY recommend rapidssl.com; takes all of 5 minutes max to get your cert. What OS are you using, and what version? I have a couple of tips about setting it up on OS X Server...
>> 
>> 
>> Bob Patin
>> Longterm Solutions LLC
>> P.O. Box 3408
>> Brentwood, TN 37024
>> bob at longtermsolutions.com
>> 615-333-6858
>> http://www.longtermsolutions.com
>> iChat: bobpatin
>> AIM: longterm1954
>> Twitter: bobpatin
>> Google+: http://www.longtermsolutions.com/plus
>> --
>> FileMaker 9, 10 & 11 Certified Developer
>> Member of FileMaker Business Alliance and FileMaker TechNet
>> --
>> FileMaker hosting and consulting for all versions of FileMaker
>> PHP • Full email services • Free DNS hosting • Colocation • Consulting
>> On Feb 14, 2013, at 7:02 PM, Joel Shapiro <jsfmp at earthlink.net> wrote:
>> 
>>> Hi all
>>> 
>>> Just seeking some basic clarification on SSL certs & DNS w/ domains, subdomains, etc.
>>> 
>>> 1) Given the following two sites:
>>> abc.domain.com/apples/
>>> abc.domain.com/bananas/
>>> 
>>> Is it correct that these two sites:
>>> a) Can share one SSL cert
>>> b) Must be on the same server
>>> 
>>> 
>>> 2) Given the following two sites:
>>> apples.domain.com/
>>> bananas.domain.com/
>>> 
>>> Is it correct that these two sites:
>>> a) Must each have their own SSL cert
>>> b) Can be on the same server or on two different servers
>>> 
>>> 
>>> TIA,
>>> -Joel_______________________________________________
>>> FX.php_List mailing list
>>> FX.php_List at mail.iviking.org
>>> http://www.iviking.org/mailman/listinfo/fx.php_list
>> 
>> _______________________________________________
>> FX.php_List mailing list
>> FX.php_List at mail.iviking.org
>> http://www.iviking.org/mailman/listinfo/fx.php_list
> 
> _______________________________________________
> FX.php_List mailing list
> FX.php_List at mail.iviking.org
> http://www.iviking.org/mailman/listinfo/fx.php_list

Steve Winter
+44 777 852 4776
steve at bluecrocodile.co.nz