orokusaki
orokusaki

Reputation: 57118

OpenSSL for HTTPS without a certificate

I'm looking to create an application in Django which will allow for each client to point their domain to my server. At this point, I would want their domain to be accessed via https protocol and have a valid SSL connection. With OpenSSL, more specifically M2Crypto, can I do this right out the gate? Or, do I still need to purchase an SSL cert? Also, if the former is true (can do without purchase), does this mean I need to have a Python-based web server listening on 443 or does this all somehow still work with NGINX, et al?

Any help is appreciated.

Upvotes: 1

Views: 859

Answers (2)

Heikki Toivonen
Heikki Toivonen

Reputation: 31130

You will need a certificate, but there are even free SSL certs now that work in most common browsers.

For very low volume site you could let M2Crypto handle SSL. However, for any public service you should go with a regular server to handle the SSL.

In theory you can serve multiple SSL domains from the same IP address, but this is not supported in older browsers and OSes. See SNI on Wikipedia.

Upvotes: 3

Ignacio Vazquez-Abrams
Ignacio Vazquez-Abrams

Reputation: 798626

You will need a SSL cert, and let the web server handle the HTTPS.

Upvotes: 2

Related Questions