Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (asf.osuosl.org: local policy)
Message-ID: <19598.194.151.119.137.1152258424.squirrel@webmail.xs4all.nl>
In-Reply-To: <20060707043852.81605.qmail@web32914.mail.mud.yahoo.com>
References: <20060707043852.81605.qmail@web32914.mail.mud.yahoo.com>
Date: Fri, 7 Jul 2006 09:47:04 +0200 (CEST)
From: "Joost de Heer" <sanguis@xs4all.nl>
To: "James Jacob" <mail2jamesnow@yahoo.com>
Cc: users@httpd.apache.org
Reply-To: sanguis@xs4all.nl
User-Agent: SquirrelMail/1.4.5
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Subject: [users@httpd] Re: Multiple SSL virtual servers on the same IP address
 and port
     number

James Jacob wrote:
>   Hi,
>   I'm using Apache HTTP Server (version 2.0.55) for my project. I'm having
> three SSL sites which I run on the same IPaddress, but with different
> port numbers.
>
>   For example say for the ports 443, 444 & 445.
>   The sites I have can be for example,
>   1) one.xyz.com
>   2) two.xyz.com
>   3) three.xyz.com
>
>   I have also set re-direction such that if the user types a  http:// site
> it gets redirected to the corresponding https:// site with the required
> port number. However, the issue comes when the user types https://
> without the required port number, since it goes to the default https://
> site.
>
>   Is there any way to add more SSL virtual server sites with the same IP
> address and Port ?
>   If the user types https://two.xyz.com then it should get re-directed to
> https://two.xyz.com:444 . Rightnow it shows one.xyz.com since that site
> is given with the default port. Any script or something which can do the
> trick could be useful.

The following in your 443 SSL host might work:

RewriteEngine On

RewriteCond %{HTTP_HOST} two\.xyz\.com
RewriteRule /(.*) https://two.xyz.com:444/$1 [R=301]
RewriteCond %{HTTP_HOST} three\.xyz\.com
RewriteRule /(.*) https://three.xyz.com:445/$1 [R=301]

This will, however, not stop the main problem: You'll get the certificate
of one.xyz.com if you go to https://two.xyz.com, which results in a
security message.

Joost


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org