Return-Path: 
 <users-return-61205-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: (qmail 14059 invoked from network); 16 Mar 2006 09:29:38 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur.apache.org with SMTP; 16 Mar 2006 09:29:38 -0000
Received: (qmail 72189 invoked by uid 500); 16 Mar 2006 09:29:30 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 72171 invoked by uid 500); 16 Mar 2006 09:29:30 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 72160 invoked by uid 99); 16 Mar 2006 09:29:29 -0000
Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 16 Mar 2006 01:29:29 -0800
X-ASF-Spam-Status: No, hits=0.0 required=10.0
	tests=
X-Spam-Check-By: apache.org
Received-SPF: neutral (asf.osuosl.org: local policy)
Received: from [212.27.42.36] (HELO smtp6-g19.free.fr) (212.27.42.36)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 16 Mar 2006 01:29:29 -0800
Received: from mail1.intra.tuxee.net (tuxee.net [82.241.80.108])
	by smtp6-g19.free.fr (Postfix) with ESMTP id 6414C223A7
	for <users@httpd.apache.org>; Thu, 16 Mar 2006 10:29:07 +0100 (CET)
Received: from mau.intra.tuxee.net (mau.intra.tuxee.net [192.168.1.10])
	by mail1.intra.tuxee.net (8.13.4/8.13.4) with ESMTP id k2G9Tf5V003580
	for <users@httpd.apache.org>; Thu, 16 Mar 2006 09:29:41 GMT
Received: from mau.intra.tuxee.net (localhost [127.0.0.1])
	by mau.intra.tuxee.net (8.13.4/8.13.4) with ESMTP id k2G9T2jP031874
	for <users@httpd.apache.org>; Thu, 16 Mar 2006 10:29:02 +0100
Received: (from fred@localhost)
	by mau.intra.tuxee.net (8.13.4/8.13.4/Submit) id k2G9T2wG031873;
	Thu, 16 Mar 2006 10:29:02 +0100
X-Authentication-Warning: mau.intra.tuxee.net: fred set sender to
 frederic@jolliton.com using -f
From: =?iso-8859-1?Q?Fr=E9d=E9ric?= Jolliton <httpd@frederic.jolliton.com>
To: users@httpd.apache.org
Date: Thu, 16 Mar 2006 10:11:37 +0100
User-Agent: Gnus/5.110004 (No Gnus v0.4) Emacs/22.0.50 (gnu/linux)
Message-ID: <868xra3fhe.fsf@mau.intra.tuxee.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-Virus-Checked: Checked by ClamAV on apache.org
Subject: [users@httpd] Are multiple <VirtualHost *:80 *:443> ok with wildcard
 cert ?
X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N

Hi,

[I already sent this message to modssl ML, but since it's about
Apache 2 I'm not sure if this place was more appropriate.]

(Apache 2.0.55, Linux 2.6)

I can't find authoritative answer about the following question.

I would like to be sure that I can have multiple VirtualHost
configured simultaneously for HTTP and HTTPS (port 80 and port 443
respectively) as presented below.

If I've a certificate with 'cn' to '*.example.com' and the following
Apache configuration, is that ok ? Currently it works fine, but I'm
not sure if I'm relying on some unspecified/undefined behaviors.

Also, is this dummy VirtualHost (the first one) the correct way to
"force" a given port to answer HTTP instead of HTTPS ? (I know that
it's the other way, where the "first" virtual host with enabled SSL
determine port with HTTPS.)

Again, there is no problems with this config, but I was just wondering
about its validity.

-=3D-=3D-
Listen 80
Listen 443

NameVirtualHost *:80
NameVirtualHost *:443

<VirtualHost *:80>
  # Dummy empty VirtualHost to ensure than port 80 is HTTP
</VirtualHost>

<VirtualHost *:80 *:443>
  Include common-ssl.conf
  ServerName foo.example.com
  [..]
</VirtualHost>

<VirtualHost *:80 *:443>
  Include common-ssl.conf
  ServerName bar.example.com
  [..]
</VirtualHost>
-=3D-=3D-

and common-ssl.conf contains:

-=3D-=3D-
<IfModule mod_ssl.c>
  SSLEngine on
  SSLCertificateFile conf/ssl/web.example.com-cert.pem
  SSLCertificateKeyFile conf/ssl/web.example.com-key.pem
  SSLCertificateChainFile conf/ssl/root-cert.pem
  [.. other SSL options ..]
</IfModule>
-=3D-=3D-

--=20
Fr=E9d=E9ric Jolliton

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org