它是需要有专用的IP地址安装SSL证书？ [英] Is it necessary to have dedicated IP Address to install SSL certificate?

问题描述

我有一个共享的托管计划。现在，我的托管公司说，这是需要有专用的IP Addrss安装SSL证书？

I have a shared hosting plan. Now, my hosting company says it is necessary to have dedicated IP Addrss to install SSL certificate?

是这样吗？

我们能没有专用的IP地址安装SSL证书？

Can we install SSL certificate without dedicated IP address?

推荐答案

如果您的服务器支持SNI（服务器名称指示），那么你并不需要一个专用的IP。为SNI 的浏览器的支持是pretty好这些天。

If your server support SNI (Server Name Indication) then you don't need a dedicated IP. The browser support for SNI is pretty good these days.

如果您的服务器不支持SNI然后是，你需要每证书专用IP地址。
由于SSL / TLS握手之前的任何HTTP头发生（最明显的是主机头）发送没有办法Web服务器能知道要发送的证书。您可以使用 SAN 或一个IP /端口上承载多个域/子< A HREF =htt​​p://wiki.cacert.org/WildcardCertificates相对=nofollow>通配符证书，但你还是会至少需要在专用IP。

If your server doesn't support SNI then yes, you need dedicated IP Address per certificate. Since SSL/TLS handshake happens before any http headers (most notably the host header) is sent there's no way that the web server could know which certificate to send. You can host multiple domains/subdomain on one ip/port using a SAN or wildcard certificate certificate but you'd still need at least on dedicated IP.

有关详细信息，请参阅<一个href=\"http://blogs.iis.net/thomad/archive/2008/01/25/ssl-certificates-on-sites-with-host-headers.aspx\" rel=\"nofollow\">http://blogs.iis.net/thomad/archive/2008/01/25/ssl-certificates-on-sites-with-host-headers.aspx

这篇关于它是需要有专用的IP地址安装SSL证书？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！