如何让两个 SSL 证书在两个域、共享 IP 配置上工作
我有两个 99% 相似的网站。它们共享所有相同的页面,不同之处在于徽标发生了变化,一些链接发生了变化,并且显示在任一网站上的产品被标记为显示在其中一个或/或两个网站上。他们使用相同的数据库。
我编写了一个实用程序方法,该方法本质上将 where 子句注入到我在整个应用程序中编写的任何数据库访问代码中,以确定根据当前 URL 显示哪些产品。
问题:网站 B 向用户发出警告消息,表明他们尝试访问的网站实际上是网站 A。我了解到 SSL 证书需要不同的 IP。
现在,从维护的角度来看,我的一切设置方式都非常清晰。我可以在一处更新文件。关于如何使 SSL 表现有什么建议,或者我是否在寻找单独的 IP 进行托管(我真的不想这样做)?
如果是后者,你有什么建议?
网站运行 ASP.NET 4.0。预编译DLL。
I have two web site that are 99% similar. They share all of the same pages except the difference being that the logos change, a few of the links change, and the products that show up on either web site are flagged to show up on either or, or both. They use the same database.
I have written a utility method that essentially injects a where clause into any database access code I write throughout the app to determine which products to display depending on the current URL.
Problem: Website B gives the user a warning message that the site they are trying to go to is in fact Website A. I've read that the SSL cert needs a distinct IP.
Right now how I have everything set up is very clean on a maintenance perspective. I can update files in one place. Any suggestions on how to make the SSL behave, or am I looking at seperate IP's for the hosting(I really don't want to have to do this)?
If the latter, what do you suggest?
Site runs ASP.NET 4.0. Precompiled DLL.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
更新:感谢 @GregS 评论
如果站点共享相同的域,您可以使用通配符证书
否则,您将需要获得 UCC(联合通信证书),该证书将对于两个域。
您需要从命令行配置 IIS 7,因为 GUI 不支持为同一证书设置不同的主机标头。 本教程展示了如何做到这一点。
UPDATE: Thanks to @GregS comment
If the sites share the same domain you can use a wildcard certificate
Otherwise you will need to get a UCC (United communications certificate) that will be for both domains.
You will need to configure IIS 7 from the command line because the GUI doesn't support setting different host headers for the same certificate. This tutorial shows how it can be done.
我在 IIS 中设置了另一个网站,该网站指向与第一个网站相同的文件,并为新网站获取了另一个 SSL 证书。
I setup another website in IIS that points to the same files as the first web site, got another SSL cert for the new site.