httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Matthew A. Bockol" <mboc...@carleton.edu>
Subject Re: [users@httpd] Name-based virtual hosting with SSL
Date Mon, 31 Mar 2008 14:39:26 GMT
You might want to investigate using a wildcard cert, then name-based virtual hosting can work
with SSL. This requires that your hosts all be from the same domain ( x.foo.com, y.foo.com
etc. )

Similarly, mod_gnutls ( http://www.outoforder.cc/projects/apache/mod_gnutls ) permits Name-based
virtual hosts with SSL using Server Name Indication (SNI). I don't know that I'd want to run
it on a production site yet and SNI isn't supported on all browsers.

Matt


----- Original Message -----
From: "Joshua Slive" <joshua@slive.ca>
To: users@httpd.apache.org
Sent: Sunday, March 30, 2008 9:39:39 AM GMT -06:00 US/Canada Central
Subject: Re: [users@httpd] Name-based virtual hosting with SSL

On Sun, Mar 30, 2008 at 3:36 AM, Vinay Purohit <Vinay.Purohit@trianz.com> wrote:
>
>  Hi,
>
>  Why Name-based virtual hosting cannot be used with SSL secure servers ?

Because in order to choose the correct certificate to negotiate the
secure connection, the server must know what name to use. But the name
in the request is only available after the secure connection has been
negotiated.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message