SSL Certificate and Redirection

All,

Here is the current situation: We have 4 security certificated by VeriSign.
They are site-a.company.com, site-b.company.com, site-c.company.com, and
site-d.company.com.

We would like to have only one security certificate, site-a.company.com.
Using 3 virtual directories that redirects to other internal servers, we
would like to be able to access site-b.company.com via
site-a.company.com/site-b, site-c.company.com via site-a.company.com/site-c,
and site-d.company.com via site-a.company.com/site-d.

The problem appears to be that when the redirection takes place from the
virtual directory the client browser goes from site-a.company.com/site-b to
site-b.company.com and picks up the security certificate to go with that
site. It appears that the certificate is not traveling between servers,
further, even if it would given no other certificates, it appears that the
certificate will still yell at the user because the certificate is
registered to site-a.company.com but the site name (because of the
redirection) is site-b.company.com.

Shahir Ahang

Andrey
Fri Jun 18 00:52:13 CDT 2004

Shahir A. Ahang wrote:

> All,
>
> Here is the current situation: We have 4 security certificated by VeriSign.
> They are site-a.company.com, site-b.company.com, site-c.company.com, and
> site-d.company.com.
>
> We would like to have only one security certificate, site-a.company.com.
> Using 3 virtual directories that redirects to other internal servers, we
> would like to be able to access site-b.company.com via
> site-a.company.com/site-b, site-c.company.com via site-a.company.com/site-c,
> and site-d.company.com via site-a.company.com/site-d.
>
> The problem appears to be that when the redirection takes place from the
> virtual directory the client browser goes from site-a.company.com/site-b to
> site-b.company.com and picks up the security certificate to go with that
> site. It appears that the certificate is not traveling between servers,
> further, even if it would given no other certificates, it appears that the
> certificate will still yell at the user because the certificate is
> registered to site-a.company.com but the site name (because of the
> redirection) is site-b.company.com.
>
> Shahir Ahang
>
>

I would recommend to check the redirect scripts / settings

> The problem appears to be that when the redirection takes place from the
> virtual directory the client browser goes from
site-a.company.com/site-b to
> site-b.company.com

try to investigate further why it does so.

Another hint - you may order *.company.com SSL Cert

-Andrey