Search code examples
sslsni

Any workaround to run SNI supported sites on windows xp and IE8


This question is asked multiple time and there are well briefed answers, IE on XP does not support

But we have problem that we have not enough public ips to assign for individual ssl based url. I have very basic question that can we run SNI sites(that points to single ip) on windowsXP and IE8.

We have some workarounds like, buy an other pool of IPS but that will really cost us a lot. Thanks


Solution

  • The only way to have multiple certificates on the same IP and port is to use SNI, and this needs a browser which can do SNI. Because you usually don't have control about the client you cannot force them to upgrade windows or use another browser on the same platform.

    So if you really need to support multiple certificates on a single IP and cannot use SNI, your only option is to have the http server listen on different ports and setup the certificates based on the port. Note, that this might give you other problems, because non-standard port for https might be blocked by firewalls.