IIS5 and SSL

I’ve installed an SSL cert for mysite.domain.com, and I currently have the
site set up to use a specific IP and a host-header, but SSL doesn’t work at
https://mysite.domain.com.
Is SSL with a host-header possible? I’ve consulted the IIS 5 documentation,
and the info there is conflicting.
If it’s not, I suppose I could define my site as ip.ip.ip.ip with no
host-header, and setup DNS to resolve mysite.domain.com to that IP. Would
that work?

TIA,

Berry wrote on Tue, 25 Apr 2006 07:17:03 -0700:

> I’ve installed an SSL cert for mysite.domain.com, and I currently have the
> site set up to use a specific IP and a host-header, but SSL doesn’t work
> at https://mysite.domain.com.
> Is SSL with a host-header possible? I’ve consulted the IIS 5
> documentation, and the info there is conflicting.
> If it’s not, I suppose I could define my site as ip.ip.ip.ip with no
> host-header, and setup DNS to resolve mysite.domain.com to that IP. Would
> that work?
>
> TIA,

SSL is negotiated before the browser sends the Host header. You need to have
the site set up with the certificate using the common name (host name) for
the site, and ensure that DNS maps the hostname you've used to the IP
address for your site.

For instance, if you have a site mysite.domain.com on IP 10.11.12.13 with an
SSL certificate, but you have mysite.domain.com resolving to 14.15.16.17,
then SSL won't work as the initial connection from your browser will be to
port 443 on 14.15.16.17, yet IIS is listening to port 443 on 10.11.12.13.

Does that make sense?

Dan