Share via

Securing single web server with SSL certificate for multi domains

Aln technical Support 1 Reputation point
2020-07-30T13:13:04.77+00:00

Not sure if this is the correct place to post this.

We are currently writing a content management system in ASP.NET Core, to run on either windows or Linux VM web server.

We want to allow any prospective customers to come along and sign up to the system without having to any URL binding or SSL changes in either IIS or nginx system, and be able to point there domain at the server once they have signed up.

The allowed routing URL testing will be handled by the application.

Is it possible to secure the external server IP with a single SSL certificate based on external IP along with standard DDOS protection type, if so how and what products to use.

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,575 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,400 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Andreas Baumgarten 103.9K Reputation points MVP
    2020-07-30T17:12:59+00:00

    As far as I know a SSL certificate can't be issued to an ip address. A SSL certificate is always issued to a domain name (wildcard) or a host (FQDN).

    Maybe this is helpful.

    Regards

    Andreas Baumgarten

    (Please don't forget to Accept as answer if the reply is helpful)

    0 comments
  2. Jon Alfred Smith 541 Reputation points
    2020-08-11T22:11:19.703+00:00

    You can very well issue certs to IP addresses. For instance Kemp Load Balancers come with such things. Though there are some limitations, as noted in the links below. And I do not know if it will work in your scenario.

    Here's one example: https://www.leaderssl.com/articles/381-issuing-ssl-certificate-for-an-ip-address
    Here's another one: https://www.geocerts.com/support/ip-address-in-ssl-certificate
    Self-signed: https://medium.com/@antelle/how-to-generate-a-self-signed-ssl-certificate-for-an-ip-address-f0dd8dddf754

    0 comments