Return-Path: 
 <dev-return-75216-apmail-httpd-dev-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-dev-archive@www.apache.org
Delivered-To: apmail-httpd-dev-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id F28C696AF
	for <apmail-httpd-dev-archive@www.apache.org>;
 Tue, 17 Apr 2012 15:17:58 +0000 (UTC)
Received: (qmail 86760 invoked by uid 500); 17 Apr 2012 15:17:58 -0000
Delivered-To: apmail-httpd-dev-archive@httpd.apache.org
Received: (qmail 86693 invoked by uid 500); 17 Apr 2012 15:17:58 -0000
Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
list-help: <mailto:dev-help@httpd.apache.org>
list-unsubscribe: <mailto:dev-unsubscribe@httpd.apache.org>
List-Post: <mailto:dev@httpd.apache.org>
List-Id: <dev.httpd.apache.org>
Delivered-To: mailing list dev@httpd.apache.org
Received: (qmail 86684 invoked by uid 99); 17 Apr 2012 15:17:58 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 17 Apr 2012 15:17:58 +0000
X-ASF-Spam-Status: No, hits=-0.0 required=5.0
	tests=SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (nike.apache.org: domain of i.galic@brainsware.org
 designates 188.40.115.121 as permitted sender)
Received: from [188.40.115.121] (HELO mail.brainsware.org) (188.40.115.121)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 17 Apr 2012 15:17:50 +0000
Received: from localhost (localhost.localdomain [127.0.0.1])
	by mail.brainsware.org (Postfix) with ESMTP id 06D366C008;
	Tue, 17 Apr 2012 15:17:30 +0000 (UTC)
X-Virus-Scanned: amavisd-new at brainsware.org
Received: from mail.brainsware.org ([127.0.0.1])
	by localhost (mail.brainsware.org [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id mvL6-byEJts6; Tue, 17 Apr 2012 15:17:24 +0000 (UTC)
Received: from mail.brainsware.org (mail.brainsware.org [188.40.115.121])
	by mail.brainsware.org (Postfix) with ESMTP id 985566C007;
	Tue, 17 Apr 2012 15:17:24 +0000 (UTC)
Date: Tue, 17 Apr 2012 15:17:24 -0000 (UTC)
From: Igor =?utf-8?Q?Gali=C4=87?= <i.galic@brainsware.org>
To: dev@httpd.apache.org
Cc: h reindl <h.reindl@thelounge.net>,
 "Mikhail T." <mi+thun@aldan.algebra.com>
Subject: Re: Why aren't name-based vhosts not working properly under SSL?
Message-ID: <bb930836-b57f-4b8e-8269-1fa550da5d9e@iris>
In-Reply-To: 
 <CAFHbX1KqG2+gLDyRb4YFqv33TrFVbmFK56tKKXcXNi83mOOLQg@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Originating-IP: [193.43.158.225]
X-Mailer: Zimbra 7.0.0_GA_3077 (ZimbraWebClient - SAF3 (Win)/7.0.0_GA_3077)



----- Original Message -----
> On Mon, Apr 16, 2012 at 4:51 PM, Mikhail T.
> <mi+thun@aldan.algebra.com> wrote:
> > On 16.04.2012 11:40, Tom Evans wrote:
> >
> > They can. Excerpt from my httpd.conf:
> >
> > Your excerpt does not show different DocumentRoots -- nor any other
> > settings... Could you show more contents? What is the Apache
> > version you are
> > using? In all my attempts, Apache a) issues a pointless warning
> > about
> > multiple SSL vhosts on the same IP/port; b) uses the settings
> > (including
> > DocumentRoot) from the first vhost encountered for all of them.
> >
> 
> Er, OK:

Hi Tom,

some constructive criticism, if you so allow:

I can see a lot of repetition here, you might
profit a lot from mod_macro

[snip]
>     <LocationMatch ^(?!/errors/)>
>         SSLRequire %{SSL_CLIENT_VERIFY} eq "SUCCESS"
>         SSLVerifyClient optional
>     </LocationMatch>

It seems sensible to set this in server context, so you
don't have to repeat it over and over again.

[snip]

> This is httpd 2.2.21 btw
> 
> Cheers
> 
> Tom

i
 

-- 
Igor Gali=C4=87

Tel: +43 (0) 664 886 22 883
Mail: i.galic@brainsware.org
URL: http://brainsware.org/
GPG: 6880 4155 74BD FD7C B515  2EA5 4B1D 9E08 A097 C9AE