Um IP para vários sites SSL? [duplicado]

1

Estamos planejando hospedar sites da Magento em um servidor dedicado. É possível hospedar ~ 40 sites Magento por servidor dedicado. Cada site requer SSL. Então, eu acho que IP dedicado separado é necessário para cada 40 certificados SSL.

Como os provedores de hospedagem estão ficando sem IPs, podemos ter 40 ips dedicados por servidor ou um único IP dedicado pode ser usado para 40 sites SSL? Ansioso por suas sugestões.

    
por blakcaps 17.08.2011 / 12:37

1 resposta

1

Se você usar o apache, é melhor usar 40 IPs. Estou apenas citando:

Name-Based VirtualHosts and SSL

As a rule, it is impossible to host more than one SSL virtual host on the same IP address and port. This is because Apache needs to know the name of the host in order to choose the correct certificate to setup the encryption layer. But the name of the host being requested is contained only in the HTTP request headers, which are part of the encrypted content. It is therefore not available until after the encryption is already negotiated. This means that the correct certificate cannot be selected, and clients will receive certificate mismatch warnings and be vulnerable to man-in-the-middle attacks.

In reality, Apache will allow you to configure name-based SSL virtual hosts, but it will always use the configuration from the first-listed virtual host (on the selected IP address and port) to setup the encryption layer. In certain specific circumstances, it is acceptable to use a single SSL configuration for several virtual hosts. In particular, this will work if the SSL certificate applies to all the virtual hosts. For example, this will work if: [...]

Src: link

    
por 17.08.2011 / 14:43