Apache - wildcard ssl dedicated ipaddress for each subdomain?
 

Hi,

After a long time I have been here to post this question.

I am really confused, I have just wildcard SSL crt is ready with me and have to install it.

But I don’t know whether each separate sub domain have a separate IP? Or I could have one IP address for all subdomain in order to install wildcard ssl?

Any idea would be highly appreciated.

the certificate you associate with a virtualhost doesn't relate to the IP addresses involved, that really wouldn't scale as you have more hosts. you can serve them all from a single ip no problems.

SSL certificates by default allow you port one port per every one IP address. In other words, you can have port https port 443 for one address but not for another address. You would have to then create another port, like 446 for the other address. Or you could have separate ip addresses with the same port 443 - it's a security feature that makes a lot of sense - HTTPS operates at the session layer of TCP rather than then transport layer such as HTTP. So it's logically impossible to create connections to port 443 to separate destination addresses - it would defeat the purpose of SSL security. Has anybody else been through this?