Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (asf.osuosl.org: domain of jacek.chmielewski@gmail.com
 designates 64.233.184.224 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
        b=PcNAvnEK09jRokZwz9dLX8dp7L1szTQ42EGnJh7ScOQEP35hKvMWGVMlHv9SnWBdZx3gttpJPAPSwFozOPF+EqusP86SUGeCC4f3vA3S7g83d4wcC8IMDyXzVrw3C4M5adxnBgFJ/hjKv6jcaxjBj2CxGlA5wec1mkJOkW0FFF0=
Message-ID: <e8966eec0603291518j4a4dfe86rff0b96c6877b8960@mail.gmail.com>
Date: Thu, 30 Mar 2006 01:18:16 +0200
From: "Jacek Chmielewski" <jacek.chmielewski@gmail.com>
To: users@httpd.apache.org
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Subject: [users@httpd] Name based virtual hosts and wildcard certificate

Hi

I have a problem with running HTTPS for name based virtual hosts. I
know that 'SSL wont work for name-based virtual hosts'
[http://www.modssl.org/docs/2.8/ssl_faq.html#ToC47]. But it is known
that for name based virtual hosts Apache will read the certificate set
for the fist vhost and this is ok for me, since I have just one
wildcard certificate [*.mydomain.com] and I use it for all vhosts.

It seems to work properly with 5-7 virtual hosts. But when i try to
add another vhost with the same certificate Apache throws an error:

[error] Oops, no RSA or DSA server certificate found for
'vhost8.mydomain.com:0'?!

I have no idea why there is a problem. All vhosts differ only with
ServerName and DocumentRoot. The rest of the configuration is the same
and all vhosts have the same certificate. So why Apache tells me that
it cannot find the certificate file when it already read it for the
previous seven vhosts? Any ideas where to look for solution?

OS: FreeBSD 6
Apache: 2.2.0_7 (but I got the same error with Apache 2.0)

Sample vhost config:

<VirtualHost *:443>
   ServerName vhost8.mydomain.com
   DocumentRoot /home/www/vhost8
   DirectoryIndex index.php index.html

   SSLEngine on
   SSLCertificateFile          /usr/local/etc/apache22/crt/server.crt
   SSLCertificateKeyFile       /usr/local/etc/apache22/crt/server.key
   SSLCACertificateFile        /usr/local/etc/apache22/crt/ca.crt
</VirtualHost>

--
Best regards

 ..:: Jacek Chmielewski :: IT outsourcing group :: www.itog.pl ::..

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org