asked on

How do you add ssl certificate multiple web sites on a server 2003 IIS6

I am trying to add a Security certificate that I obtained from Go Daddy that allows up to 5 web sites to use. I have added it to the server. The first site that I added holytrinitygoaltracker.com works fine. When I bind the certificate to a second site htlap.com it connects to the holytrinitygoaltracker.com site. I tried this with 2 other sites they all connect to holytrinitygoaltracker.com. If I uncheck the require secure channel in IIS6 the sites work fine but there's now security. I have read that when this happens the http headers must be wrong. I have checked my headers and they all appear to be ok. Can anyone help me get this configured.
Thanks

Gary

This is a unified cert with a single IP?

whiwex

ASKER

It is a single IP and I'm not sure if it is a unified cert. How do you tell?

ASKER CERTIFIED SOLUTION

Gary

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

whiwex

ASKER

I did the cscript.exe and the script ran with now errors but it still goes to the wrong web site.

Gary

To be sure you have all the headers set for the websites and one header for 443
You are using the correct identifier for each site when assigning the bindings.

And to be doubly sure - the SSL cert you got is allowed for multiple domains? i.e. it is not a wildcard cert but you selected Multiple Domains UCC

becraig

http://www.digicert.com/ssl-support/configure-iis-host-headers.htm

Here is the major question:
How many IP addresses do you have on the server these websites are hosted on ?

Here is a walkthrough for using a UUC cert:
http://toastergremlin.com/?p=308

whiwex

ASKER

Do I have to add a host header for every time of connection for example I have the following host header for the htlap.com site:
www.htlap.com
htlap.com

Do I also have to have http:htlap.com and https:htlap.com.

Gary

No, you should decide if you want htlap.com or www.htlap.com and use rewrite rules to redirect to the relevant one - you should never be using both, you will get duplicate content penalties from the search engines.
Though saying that you may have to add the SSL mapping for both else you may get a secure connection warning if you haven't mapped both variations - this I am not sure about.

whiwex

ASKER

I did try mapping both it didn't help. What is rewrite rules?

Gary

Did you try restarting IIS.

whiwex

ASKER

I will restart IIS tonight amd let you know.
Thanks

whiwex

ASKER

Thanks