SSL with DynDNS and Subsonic on Windows host?

[rvonder]

Apologies if this has been answered, but I've searched all over and haven't found an answer that covers my complete situation.

I am running Subsonic with MusicCabinet on a Windows server. Because I have a dynamic IP address (Verizon FiOS service), I use DynDNS to provide a static URL that always maps directly to Subsonic.

I also have my own domain name, which is currently hosted by Dreamhost. I've set up a subdomain (music.mydomain.com), with a CNAME record pointing to my DynDNS URL. All of this works great - in a browser, just enter music.mydomain.com and the Subsonic web interface opens right up. The browser's URL is rewritten to show http://xxx.xxx.xxx.xxx:4040 (with x's replaced by whatever DynDNS knows to be my current FiOS IP address).

I'd now like to start using an SSL connection to Subsonic. I have a Class 1 SSL certificate from StartSSL for my subdomain, but don't know where to go from here: Would the cert have to be installed at Dreamhost, or at my end (i.e., on my Windows server)? To install at Dreamhost (or on any other shared host) requires a dedicated IP address, which would add about $4 a month to my hosting bill and I don't really need for any other reason. So before I consider it, I'd like to make sure that's what I'd need. If instead the cert should be installed on my own server, which seems more logical to me, how would I go about it? I've seen several writeups for installing on Linux under Apache, but nothing for Windows.

Any advice welcomed, and if add'l info is needed to answer, just let me know. Many thanks in advance!

[sir2u]

You would install the certificates on your server. The DNS record is only telling people where your server should be, but not verifying that it is actually you there. That's what the certificate on the server is for.

What kind of web server does your installation use? I don't run mine on a Windows server, but I can give you a hand with a little more info.

[rvonder]

What kind of web server does your installation use?

I'm not running any third-party web server - I've simply installed Postgres, Subsonic (with MusicCabinet) natively, running under Win 8. Works fine, both inside my LAN and from the outside (port 4040 is enabled through the router firewall).

Is there a reason I need to install everything some other way? Since I also use this machine interactively, I hate to pile on any more resource-sucking background services than necessary. But I would like to move to an encrypted connection, for all the obvious reasons.

I'm assuming that the server certificate would be issued for the high-level subdomain name used to connect to my server (music.xxxxxxxx.com), and not somehow be identified with the low-level server itself? If it's the latter, I have a problem because as I mentioned, my server has a dynamic IP address (solved by having DynDNS in-between my personal domain's DNS and my actual server). Hope that makes sense...

Thanks!