Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (asf.osuosl.org: local policy)
Content-Class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Importance: normal
Priority: normal
Date: Thu, 22 Jun 2006 17:11:56 +0200
Message-ID: 
 <FDD5D99066749040AF9098A720E989770377FD94@CIWMEXZSA0E.ex.ordersx.org>
Thread-Topic: [users@httpd] SSL proxy - just one public ip address
thread-index: AcaWDKh9OgVEaSQLT3a84f2UHvskigAANGOA
From: "Boyle Owen" <Owen.Boyle@swx.com>
To: <users@httpd.apache.org>
Subject: RE: [users@httpd] SSL proxy - just one public ip address

> -----Original Message-----
> From: Fred Fiat [mailto:fred.fiat@inbox.com]=20
> Sent: Thursday, June 22, 2006 5:00 PM
> To: users@httpd.apache.org
> Subject: [users@httpd] SSL proxy - just one public ip address
>=20
> Hello,
>=20
> I need to workaround a problem of having very few public
> ip addresses, but lots of websites that require SSL.
>=20
> Is there a way I can use an Apache reverse proxy so that
> it hands out the correct SSL certificate based on the=20
> virtual host that the client requests?

Not this way. The proxy can't identify the virtual host that the client =
requests because that information (the Host header) is encrypted. The =
whole point of SSL is to encrypt the data packets between the client and =
the destination server. Intermediate components are in the dark...

There is nothing in the current specification of HTTP that allows what =
you want to do.=20


>=20
> If not, are there any other workarounds?

In future, there might be: =
http://marc.theaimsgroup.com/?l=3Dapache-httpd-users&m=3D114251766914920&=
w=3D2

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored.=20

>=20
> Thanks a lot.
>=20
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP=20
> Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>=20
Diese E-mail ist eine private und pers=F6nliche Kommunikation. Sie hat =
keinen Bezug zur B=F6rsen- bzw. Gesch=E4ftst=E4tigkeit der SWX Gruppe. =
This e-mail is of a private and personal nature. It is not related to =
the exchange or business activities of the SWX Group. Le pr=E9sent =
e-mail est un message priv=E9 et personnel, sans rapport avec =
l'activit=E9 boursi=E8re du Groupe SWX.
=20
=20
This message is for the named person's use only. It may contain =
confidential, proprietary or legally privileged information. No =
confidentiality or privilege is waived or lost by any mistransmission. =
If you receive this message in error, please notify the sender urgently =
and then immediately delete the message and any copies of it from your =
system. Please also immediately destroy any hardcopies of the message. =
You must not, directly or indirectly, use, disclose, distribute, print, =
or copy any part of this message if you are not the intended recipient. =
The sender's company reserves the right to monitor all e-mail =
communications through their networks. Any views expressed in this =
message are those of the individual sender, except where the message =
states otherwise and the sender is authorised to state them to be the =
views of the sender's company.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org