Wednesday, November 04, 2009

SSL Host Headers in IIS 7 with Test SSL Certificate

Contrary to popular believe you can actually run multiple ssl sites on an IIS 7 box which only has one ip address (It's easier if you have multiple ip addresses but not impossible if you don't).

This is very useful for development and test boxes running a test ssl cert but can also be used in production environments if all secure sites run under a super cert (e.g. *.mydomain.com)

Follow the guide here

http://www.sslshopper.com/article-ssl-host-headers-in-iis-7.html

However, for the certificate you can easily use a test one in non live environments

http://weblogs.asp.net/scottgu/archive/2007/04/06/tip-trick-enabling-ssl-on-iis7-using-self-signed-certificates.aspx

I recommend you install a single TestSSL certificate on a development machine and apply this process for any new SSL enabled sites in development.

The key I discovered is to assign the certificate to the first site in IIS before running the command line to enable the host headers for other sites.

Comments are closed.