Koozali.org: home of the SME Server

Multiple domains each with its separate certificate (domain1.crt, domain2.crt .)

Offline leonardocruz

  • *
  • 24
  • +0/-0
    • http://n/a
Hi guy's

I have several domains installed on a SME version 8.1,  i have purchased certificates cheaper for them but now installed, only the last one seems to recognize not installed and each with its defined domain.

found a similar case but I see no solution and finally a link pointing to a site or a topic that no longer exists!

can someone help?

thanks in advance
LeonardoCruz

Offline janet

  • ****
  • 4,812
  • +0/-0
leonardocruz

You need to create the certificate with all hosted domains on the one certificate.
You cannot just add new certificates for each domain you add, you have to recreate the one main certificate to include existing & new domains & reinstall the new certificate.

That is a limitation or issue with SME server.

There are Howtos about Certificates so click the Howto link at top of Forum & start reading, there may be some useful tips there.
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline leonardocruz

  • *
  • 24
  • +0/-0
    • http://n/a
Is possible use this procedure with SME server?

https://www.digicert.com/ssl-support/apache-multiple-ssl-certificates-using-sni.htm

If possible could someone tell me the steps, I know this will serve someone else at some point and agradecere help as I am new is this.
« Last Edit: November 18, 2014, 03:32:11 PM by leonardocruz »
LeonardoCruz

Offline Stefano

  • *
  • 10,839
  • +2/-0
it could be achieved IMVHO with custom fragments

you need to study the templating system that rules SME, make some tests and report here..

in the meanwhile, you should/could open a NFR in bugzilla (please, before creating a new one, search bugzilla to check that the same NFR doesn't exist)

thank you

Offline Jean-Philippe Pialasse

  • *
  • 2,785
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com

Offline janet

  • ****
  • 4,812
  • +0/-0
From bug number 8185, quoting Charlie Brady:

That's not possible, because of the way that SSL and HTTPS work. The certificate is used to setup SSL encryption before the client browser sends the URL which is being requested.
« Last Edit: November 25, 2014, 07:23:39 PM by janet »
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline Daniel B.

  • *
  • 1,699
  • +0/-0
    • Firewall Services, la sécurité des réseaux
It is possible by using sni, but we need to evaluate the required amount of work
C'est la fin du monde !!! :lol:

Offline Xavier.A

  • ***
  • 104
  • +0/-0
Well, it's time, i'm agree with Daniel  :lol:

But may be you should explain what SNI is, I'm not sure that every body here have read the Apache documentation for SSL with virtualhost (https://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI)

an example of custom template :http://forums.contribs.org/index.php/topic,50665.msg255758.html#msg255758

 :lol:
“When the wise man points to the moon, the fool looks at the finger.”