Return-Path: 
 <users-return-51170-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: (qmail 13868 invoked from network); 4 Apr 2005 11:44:02 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur.apache.org with SMTP; 4 Apr 2005 11:44:02 -0000
Received: (qmail 32560 invoked by uid 500); 4 Apr 2005 11:43:46 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 32547 invoked by uid 500); 4 Apr 2005 11:43:46 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 32534 invoked by uid 99); 4 Apr 2005 11:43:46 -0000
X-ASF-Spam-Status: No, hits=0.9 required=10.0
	tests=DNS_FROM_RFC_ABUSE,FROM_ENDS_IN_NUMS
X-Spam-Check-By: apache.org
Received-SPF: pass (hermes.apache.org: local policy includes SPF record at
 spf.trusted-forwarder.org)
Received: from smtp102.mail.sc5.yahoo.com (HELO smtp102.mail.sc5.yahoo.com)
 (216.136.174.140)
  by apache.org (qpsmtpd/0.28) with SMTP; Mon, 04 Apr 2005 04:43:45 -0700
Received: from unknown (HELO ?172.26.0.2?) (jopeme2000@80.32.211.120 with
 plain)
  by smtp102.mail.sc5.yahoo.com with SMTP; 4 Apr 2005 11:43:42 -0000
Message-ID: <42512887.8070907@yahoo.es>
Date: Mon, 04 Apr 2005 13:44:07 +0200
From: jose perez <jopeme2000@yahoo.es>
User-Agent: Mozilla Thunderbird 1.0 (X11/20041207)
X-Accept-Language: es-es, es
MIME-Version: 1.0
To: users@httpd.apache.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Checked: Checked
Subject: [users@httpd] Apache 2.0.53 & ssl & virtual hosts
X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N

Hello.
I have compiled this version of apache with ssl support. I do following:
CC=gcc ./configure --prefix=/usr/local/apache2053 \
--with-mpm=worker --enable-so --enable-layout=Apache \
--enable-mods-shared=most --enable-maintainer-mode 
--with-expat=`pwd`/srclib/apr-util/xml/expat \
--enable-static-support --enable-auth-digest --enable-ssl
I have make certificates and put in right directory for domain2.com:
# /usr/local/ssl/misc/CA.sh -newca
# openssl genrsa -des3 -out server.key 1024
# openssl req -new -key server.key -out server.csr
# /usr/local/ssl/misc/CA.sh -signreq

I have several virtualhost like:

<VirtualHost 172.26.0.3>
     ServerAdmin root@domain1.com
     DocumentRoot /web1/htdocs
     ServerName domain1.com
     ServerAlias www.domain1.com
 </VirtualHost>
<VirtualHost 172.26.0.3>
     ServerAdmin root@domain2.com
     DocumentRoot /web2/htdocs
     ServerName domain2.com
     ServerAlias www.domain2.com
 </VirtualHost>
Then i need domain2.com works with ssl then i have this lines inside 
httpd.conf and ssl.conf about ssl:
httpd.conf:

<IfDefine SSL>
LoadModule ssl_module modules/mod_ssl.so
</IfDefine>
<IfModule mod_ssl.c>
    Include conf/ssl.conf
</IfModule>

ssl.conf:

SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
<IfDefine SSL>
Listen 443
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl
SSLPassPhraseDialog  builtin
SSLSessionCache         dbm:/usr/local/apache2/logs/ssl_scache
SSLSessionCacheTimeout  300
SSLMutex  file:/usr/local/apache2/logs/ssl_mutex
<VirtualHost _default_:443>
DocumentRoot "/usr/local/apache2/htdocs"
ServerName domain1.com:443
ServerAdmin root@domain1.com
ErrorLog /usr/local/apache2/logs/error_log
TransferLog /usr/local/apache2/logs/access_log
SSLEngine on
SSLCipherSuite 
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt
SSLCertificateKeyFile /usr/local/apache2/conf/ssl.key/server.key
<Files ~ "\.(cgi|shtml|phtml|php3?|php)$">
    SSLOptions +StdEnvVars
</Files>
<Directory "/usr/local/apache2/cgi-bin">
    SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0
CustomLog /usr/local/apache2053/logs/ssl_request_log \
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
</IfDefine>

My question is:
Do i need to change anything in httpd.conf ?
What do i must change in ssl.conf to use ssl with domain2.com ?
If i need to use another domain3.com with ssl do i must create another 
certificates ?

if you can show me an example step by step i will be very gratefull or 
do you know a good link ?

Thanks.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org