Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back > Forums > Linux Forums > Linux - Server
User Name
Linux - Server This forum is for the discussion of Linux Software used in a server related context.


  Search this Thread
Old 10-23-2007, 03:55 PM   #1
LQ Newbie
Registered: Oct 2006
Location: California
Distribution: Debian Etch
Posts: 9

Rep: Reputation: 0
Failover with webserver with private SSL certs

I have two servers that I've set up, and I've been researching a way to set up automatic failover/clustering. This does not seem difficult to do, with one exception.

SSL certs. An SSL cert is bound to one IP only. How do I set up clustering so that I can host my sites with SSL certs? Do I just buy two certs and keep a slightly different version of my site on each server in case of failure? I plan on using rsync to keep the majority of the pages and databases current between systems.

I'm looking at using the Hercules Load Balancer Virtual Appliance (based on pen) posted on vmware's site (

Is there another method that is out there that I'm not seeing that doesn't cost an arm and a leg?

Thanks for the help!
Old 10-23-2007, 04:17 PM   #2
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1975Reputation: 1975Reputation: 1975Reputation: 1975Reputation: 1975Reputation: 1975Reputation: 1975Reputation: 1975Reputation: 1975Reputation: 1975Reputation: 1975
It is not bound to one ip at all. That relationship is one https server can only reference one certificate. you can put that certificate on as many boxes as you feel like, but all of those boxes can only serve the same website over https.
Old 10-23-2007, 05:00 PM   #3
LQ Newbie
Registered: Oct 2006
Location: California
Distribution: Debian Etch
Posts: 9

Original Poster
Rep: Reputation: 0
Perhaps I was getting that confused with the fact that you can only have one SSL cert per IP without problems. This has to do with the fact that port 443 will serv up the first available website for that IP, correct? SSL certs cannot properly handle vhost name-based configurations.

Turns out that you *can* buy a cert to be permanently bound to only one IP, but it's not required. I didn't find that info in my last few searches.

I've got about 8 IPs to play with on each server.

Thank you for pointing me in the right direction. This certainly simplifies matters.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Webserver Failover using RH5 Jimerson Red Hat 3 08-14-2007 12:57 PM
The Big Name consipracy - and SSL certs jantman General 15 02-15-2007 02:43 PM
webserver failover imi@tux Linux - Networking 1 05-23-2006 02:47 AM
multiple ssl certs, single apache server? hank43 Linux - Software 0 01-26-2005 04:56 PM
install 2 or more SSL certs on same machine with 1 IP lsimon4180 Linux - Software 0 10-22-2004 01:19 PM > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 11:21 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration