Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of bfb21@comcast.net designates
 76.96.30.56 as permitted sender)
From: bfb21@comcast.net
To: users@httpd.apache.org
Date: Thu, 28 Aug 2008 15:46:24 +0000
Message-Id: 
 <082820081546.15516.48B6C850000AE42F00003C9C2207300033CECD0D000D@comcast.net>
Subject: [users@httpd] How to install SSL certificate for virtual server?

I have an apache 1.3x server which utilizes SSL.  Lets say the name is
www.myserver1.com.  I use apachectl startssl to start the server, and can
access it using https://www.myserver1.com.  Now I have a second virtual
server named www.myserver2.com using the same IP, which I want to secure.
When I attempt to access it, I get the following error in Firefox:

   Secure Connection Failed
   www.myserver2.com uses an invalid security certificate.
   The certificate is only valid for www.myserver1.com
   (Error code: ssl_error_bad_cert_domain)

Here's an excerpt of my virtual host configuration:

<VirtualHost 64.211.42.81>
    ServerName www.myserver2.com

    SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
    SSLCertificateFile /usr/local/apache/conf/ssl.crt/www.myserver2.com.crt
    SSLCertificateKeyFile /usr/local/apache-1.3.37/conf/ssl.key/www.myserver2.com.key

    <Files ~ "\.(cgi|shtml|phtml|php3|roc|rock?)$">
        SSLOptions +StdEnvVars
    </Files>

    SetEnvIf User-Agent ".*MSIE.*" \
             nokeepalive ssl-unclean-shutdown \
             downgrade-1.0 force-response-1.0

    CustomLog /usr/local/apache/logs/ssl_request_log \
              "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

</VirtualHost>

How do you secure a second virtual host with an SSL certificate, so I can then
access https://www.myserver2.com?

-Thanks 

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org