Multiple SSLs on one IIS Site

This forum is only for questions or discussions about working with the mojoPortal source code in Visual Studio, obtaining the source code from the repository, developing custom features, etc. If your question is not along these lines this is not the right forum. Please try to post your question in the appropriate forum.

Please do not post questions about design, CSS, or skinning here. Use the Help With Skins Forum for those questions.

This forum is for discussing mojoPortal development

This forum is only for questions or discussions about working with the mojoPortal source code in Visual Studio, obtaining the source code from the repository, developing custom features, etc. If your question is not along these lines this is not the right forum. Please try to post your question in the appropriate forum.

You can monitor commits to the repository from this page. We also recommend developers to subscribe to email notifications in the developer forum as occasionally important things are announced.

Before posting questions here you might want to review the developer documentation.

Do not post questions about design, CSS, or skinning here. Use the Help With Skins Forum for those questions.
This thread is closed to new posts. You must sign in to post in the forums.
9/23/2009 3:31:20 PM
Gravatar
Total Posts 43
Partner

Multiple SSLs on one IIS Site

Correct me if I am wrong.

It is not possible to have more than one SSL per IIS site on the mojoPortal.  IE, I could not incorporate a SSL for www.domain1.com and www.domain2.com if they are both running on the same IIS site.

Just making sure nothing changed since last year’s post. I believe this is more of an IIS issue than mojoPortal issue.

“SL is an important consideration for how you configure your sites. If any of your sites are going to need SSL they will be best if they are on separate IIS sites from the others. I mean you could have the root cite use ssl and disable it for child sites, but as soon as you need ssl for a child site you need to move it to its own IIS web site and you need another ip address. This is because only 1 SSL certificate can be installed in a site and only 1 SSL certificate can be bound to port 443 on a given ip address.”

This is going to be a big problem for me and unfortunately there is no elegant solution. I don’t like the idea of supporting multiple instances of the mojoPortal.

9/24/2009 7:17:45 AM
Gravatar
Total Posts 18439

Re: Multiple SSLs on one IIS Site

Hi Todd,

I just implemented a solution for this that will be available in the next release. 

The way it will work is this:

1. You will use 1 physical installation for all sites.

2. For any site where you want to use SSL, you will create a separate IIS site pointing to the same physical installation and use a host header to make that IIS site be used for the site you want to secure.

3. This extra IIS site will need its own ip address so you can bind the ssl certificate.

4. In user.config you will make a setting indicating ssl is available for that specific site like this:

<add key="Site1-SSLIsAvailable" value="true" />

where 1 would be changed to the site id of the site you are securing

Its this new setting option that will make this possible. Previously there was only one global setting SSLIsAvailable but with the addition of an option to configure it per site and by using additional IIS sites and ip addresses you will be able to secure sites on a case by case basis while still using one physical installation for all sites.

For others reading this, note that this solution only applies to hosting multiple sites based on host names. Multiple sites based on folders can already be secured with a single SSL certificate.

Hope it helps,

Joe

9/24/2009 9:58:46 AM
Gravatar
Total Posts 43
Partner

Re: Multiple SSLs on one IIS Site

Thanks Joe.  I plan to perform the upgrade and install the SSL as per your instructions in the next few weeks.  I will let you know if I run into any issues.

Once again, thanks for the quick enhancement!

You must sign in to post in the forums. This thread is closed to new posts.