Tyler Collard wrote:[...]
Tyler,
You can do multiple certs under a pound configuration, as long as you do
them under different listeners. You cannot use multiple certs with one
listener though, as this is a limitation of SSL. The problem is the
client will communicate with the server, handshake the certificate, and
then unwrap the HTTP traffic, which is where you would find the domain,
but by then it is too late.
A exception to this is if you wish to do a wildcard certificate, you
could do many subdomains under one listener. For my test servers, I
created a self sign cert that is for domain "*", and then one I have
accepted the certificate once I can do any domain under my virtual
environment.
Kenneth
|