Multiple SSL certificates on one server
- by Kyle O'Brien
We're hosting two websites on our fairly tiny but dedicated production server. Both website require SSL authentication.
So, we have virtualhosts set up for both of them. They both reference their own domain.key, domain.crt and domain.intermediate.crt files.
Each CSR and certificate file for each site was setup using its own unique information and nothing is shared between them (other than the server itself)
However, which ever site's symbolic link (set up in /etc/apache2/sites-enabled) is reference first, is the site who's certificate is referenced even if we're visiting the second site.
So for example, assume our companies are Cadbury and Nestle. We set up both sites with their own certificates but we create Cadbury's symbolic link in apache's site-enabled folder first and then Nestle's.
You can visit Nestle perfectly fine but if you check the certificate installation, it reference's Cadbury's certificate.
We're hosting these websites on a dedicated Ubuntu 12.04.3 LTS server. Both certificates are provided by Thawte.com.
I came across a few potential solutions with no degree of success. I'm hoping someone else has a decent solution?
Thanks
Edit:
The only other solution that seems to have provided success to some people is using SNI with Apache. However, the setups here didn't seem to coincide with our setup at all.