Securing single web server with SSL certificate for multi domains

Question

Not sure if this is the correct place to post this.

We are currently writing a content management system in ASP.NET Core, to run on either windows or Linux VM web server.

We want to allow any prospective customers to come along and sign up to the system without having to any URL binding or SSL changes in either IIS or nginx system, and be able to point there domain at the server once they have signed up.

The allowed routing URL testing will be handled by the application.

Is it possible to secure the external server IP with a single SSL certificate based on external IP along with standard DDOS protection type, if so how and what products to use.

Answer 1

As far as I know a SSL certificate can't be issued to an ip address. A SSL certificate is always issued to a domain name (wildcard) or a host (FQDN).

Maybe this is helpful.

Regards

Andreas Baumgarten

(Please don't forget to Accept as answer if the reply is helpful)

Answer 2

You can very well issue certs to IP addresses. For instance Kemp Load Balancers come with such things. Though there are some limitations, as noted in the links below. And I do not know if it will work in your scenario.

Here's one example: https://www.leaderssl.com/articles/381-issuing-ssl-certificate-for-an-ip-address
Here's another one: https://www.geocerts.com/support/ip-address-in-ssl-certificate
Self-signed: https://medium.com/@antelle/how-to-generate-a-self-signed-ssl-certificate-for-an-ip-address-f0dd8dddf754