httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Nelson, Robert D." <RDNel...@Mail.Donaldson.com>
Subject RE: VirtualHost and SSL
Date Wed, 21 Aug 2002 14:32:46 GMT
Simran:

You must use IP-based virtual hosting for SSL'd sites.  Meaning, each domain
that has a certificate must have it's own IP address.  You can use
name-based virtual hosting on that server as long as no two SSL sites share
the same IP.

 ~ Robert


> -----Original Message-----
> From: simran [mailto:simran@cse.unsw.edu.au]
> Sent: Tuesday, August 20, 2002 1:22 AM
> To: users@httpd.apache.org
> Subject: VirtualHost and SSL
> 
> 
> Hi All, 
> 
> In my httpd.conf i have configuration to the effect of:
> 
> ==========
> httpd.conf 
> ==================================================================
> NameVirtualHost *
> NameVirtualHost *:443
> 
> 
> #
> # Configuration for site Sample... 
> #
> 
> <VirtualHost *>
>   ServerName   sample.dev.mydomain.com.au
>   DocumentRoot /home/www/sample/docs
> </VirtualHost>
> 
> <VirtualHost *:443>
>   ServerName   sample.dev.mydomain.com.au
>   DocumentRoot /home/www/sample/docs
>   SSLEngine on
>   SSLCipherSuite
>         
> ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
>   SSLCertificateFile    www/sample/conf/server.crt
>   SSLCertificateKeyFile www/sample/conf/server.key
> </VirtualHost>
> 
> #
> # Configuration for site Star... 
> #
> 
> <VirtualHost *>
>   ServerName   star.dev.mydomain.com.au
>   DocumentRoot /home/www/star/docs
> </VirtualHost>
> 
> <VirtualHost *:443>
>   ServerName   sample.dev.mydomain.com.au
>   DocumentRoot /home/www/star/docs
>   SSLEngine on
>   SSLCipherSuite
>         
> ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
>   SSLCertificateFile    www/star/conf/server.crt
>   SSLCertificateKeyFile www/star/conf/server.key
> </VirtualHost>
> 
> ==============================================================
> ==========
> Now the problem i am facing is that when i go to:
> 
>   http://sample.mydomain.com.au
> 
>   and
> 
>   https://sample.mydomain.com.au/
> 
> All is well, however, 
> 
>   https://star.dev.mydomain.com.au/ gives me back the SSL certificate 
>   of the sample site (http works fine, only https is playing up?)
> 
>   If i swap the order, then i can see that the first 
> certificate in the 
>   first virtualhost that listens to 443 is actually being used, what 
>   makes it most confusing is that the the correct document root is 
>   always used! 
> 
>   Has anyone run across such a problem before? 
> 
> I guess my main questions are:
> 
> * Can i use SSL on Name Based Virtual Hosts (all using the same IP)
> 
> * If so, can someone please point me to an example (especially if 
>   the sample shows uses of 'VirtualHost *:443' 
> 
> thanks,
> 
> simran.
>   
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP 
> Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message