SSL and multiple site documents

I have a server that has one ip address on it. We created an internet site that redirects to a url that also points to that same url. We had someone try to use the second internet site name over https and it went to the main internet site for the server. I tried to create a key ring file for the second internet site and enable it but it still does not seem to work. When it hit it, I get a message that the names do not match the certificate and then I get the result of my first internet site document. Has anyone run accross this and have an idea of how to fix?

Subject: Re: SSL and multiple site documents

It sounds like you are running up against a limitation in the SSL protocol itself.

The client and server will perform the SSL handshake, including passing certificates back and forth, before the client has the opportunity to ask for a URL. This results in the server only being able to distinguish between “internet sites” and server certificates based on the IP address of the request. This isn’t a problem that we can fix in Notes – it’s a bug in the SSL protocol itself, which was designed when IP addresses were easy to come by, well before NAT and virtual web-hosting became commonplace. :slight_smile:

If you want to run multiple https sites on a single server, that server will need to have at least one IP address per keyring file.

Good luck,

dave