Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.I am contemplating a set up using Drupal 5 with Domain Access to create a variety of wild card subdomains. www.example.com would have a shopping cart and secure access, with all subsites.example.com sharing the same content. I would like users to be assigned to a subsite and have secure access to their profile information and secure pages. My question is:
What are the implications of SSL on such a setup? Is it possible to have such a configuration with one dedicated SSL certificate?
Any insights would be appreciated
Comments
Comment #1
agentrickardI do not know enough about secure certificates to answer that question. I believe certificates apply to the top-level domain, so if you use *.example.com, the cert for example.com should be enough.
You can specify that domains are linked to via http or https, on a per-domain basis. (This is used for rewriting links to the proper domain.)
As I understand it, the guys at www.rifftrax.com do something like what you are asking for, running DA with Ubercart, with the purchasing and login under SSL.
Comment #2
agentrickardComment #3
jyamada commentedSSL certificates are defined on an ip. You can create a wildcard certificate, if you are running all machines on one box. The benefit of this approach is that you can use a single wildcard cert for all your subdomains. Talk about a cost saver$$
At least that is the extent that I have reached with attempting to use this. The problem that I am finding is that the behavior in the domain access module, in particular the root domain logic appears to have some implications on defining a base_host when rewriting urls securely, such as using HTTPS://example.com as a base. If you are running multiple domains, then rewriting anything with the base host will cause a bit of redirection loop between the default domain to the base_host for the SSL setting. It would be nice to have domain access handle SSL for subdomains, or someone to guide us through the apache configuration to build rules that would work with domain access.
Any help with this would be great.
Comment #4
agentrickardYou can configure the URL scheme for each domain as http: or https:, so fail to see the issue.
Comment #5
jyamada commentedOk, I've discovered the source of my problem is: Rewrite all URLs to point to a single source
If you do not enable this option. Then Domain Access and mod_rewrite work relatively painless together.
Enabling this causes posts in plain text, not encrypted.
Comment #6
agentrickardOdd. Sounds like an Apache configuration issue.
Comment #7
xjmIf your site has the issue in #3/#5, see: #758714: Allow both http and https for a given domain?.