I've inherited a half-dozen or so wordpress sites. In a perfect world I would just put every one of them behind SSL throughout but I don't quite have enough IP addresses to go around and SNI will cut off windows XP users which is a non-starter.

The next best thing would be to at least centralize the admin functions behind a SSL-only site. So, what I'd like to do is something like:

There is a plugin which would let you force https for admin (http://wordpress.org/plugins/wordpress-https/) but it seems to require you stay in the same URL depth which won't work as I want to do this for a half-dozen or more wordpress sites and they can't all be at https://ssl.example.com/wp-admin

Any ideas how to make this happen?

I'll add we are moderately comfortable with hacking things in PHP, including the wordpress core, if need be. And we've got kooky CI / versioning schemes going on that make said hacks less painful.

While I understand the general "wp-way" would be to use multi-site here we really don't want to go down that path. Is there a way to do this that does not involve multi-site?

  • 1
    Is this multisite? – s_ha_dum Sep 30 '13 at 14:29
  • @s_ha_dum -- nope, too many different concerns involved to make that work. – Wyatt Barnett Sep 30 '13 at 16:58
  • How about using a multi-domain SSL certificate (UCC)? – Matthew Boynes Oct 2 '13 at 23:13
  • @MatthewBoynes : that would require enough IPs to cover all sites or using SNI which cuts of clients so I that approach won't exactly work. – Wyatt Barnett Oct 3 '13 at 1:38
  • 1
    Thanks -- I do get where you are coming from but that solution isn't workable. We don't want to be on multi-site as this is too multi-headed for that to work and our sites are not under *.example.com so a wildcard cert doesn't work. Furthermore, you can't have multiple virtual sites running on a single IP using a UCC cert (or any other combination of certs) without SNI so the structure doesn't you suggested isn't quite feasable anyhow. Finally, we have had to monkeypatch wordpress core a few times and we've got a system in place to handle that and keep current so hacking things is not a prob. – Wyatt Barnett Oct 3 '13 at 17:07

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.