httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From milktoast <jgre...@angeluspress.org>
Subject Re: [users@httpd] multiple SSL certs on one server behind a NAT router
Date Fri, 15 Sep 2006 02:30:55 GMT

Hi, me again.

OK, I got my 2 external IPs and 2 internal IPs

I also have 2 certs.

Now when I edit httpd.conf and chnage the _default_:443 to 192.168.1.2:443
and copy that secton and paste it and modify the IP, root path and cert path
I get this and apach will not start with ssl

[Thu Sep 14 21:00:18 2006] [error] mod_ssl: Init: Unable to read server
certific
ate from file /etc/ssl.https/www.angelusonline.org.crt (OpenSSL library
error fo
llows)
[Thu Sep 14 21:00:18 2006] [error] OpenSSL: error:0D0680A8:asn1 encoding
routine
s:ASN1_CHECK_TLEN:wrong tag
[Thu Sep 14 21:00:18 2006] [error] OpenSSL: error:0D07803A:asn1 encoding
routine
s:ASN1_ITEM_EX_D2I:nested asn1 error


I want to my cert authority and comfirmed my csr file and it is correct.

Any ideas what is happening?




Serge Dubrouski wrote:
> 
> That's possible. You have to have 2 VirtualHoosts in your httpd.conf
> (or ssl.conf, or vhosts.conf whatever you prefer), one per each IP
> (<VirtualHost IP:443>). Do not enable NameVirtualHosts for them. Place
> SSLCertificateFile and SSLCertificateKeyFile directives inside your
> VirtualHosts. Remove "default" section.
> Then it should work.
> 
> On 9/12/06, milktoast <jgreene@angeluspress.org> wrote:
> 
-- 
View this message in context: http://www.nabble.com/multiple-SSL-certs-on-one-server-behind-a-NAT-router-tf2260024.html#a6318306
Sent from the Apache HTTP Server - Users forum at Nabble.com.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message