httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Peter Schober <peter.scho...@univie.ac.at>
Subject Re: [users@httpd] Questions about implementing SSL/VirtualHosts
Date Tue, 15 Dec 2009 09:53:49 GMT
* Boyle Owen <Owen.Boyle@six-group.com> [2009-12-15 10:22]:
> > -----Original Message-----
> > From: Justin Pasher [mailto:justinp@newmediagateway.com] 
> > (a) Single FQDN, single DocumentRoot - Single IP.
> > (b) Multiple FQDN, single DocumentRoot - Single IP, assuming cert 
> > supports all (sub)domains listed. Otherwise Multiple IP
> > (c) Multiple FQDN, multiple DocumentRoot - Multiple IP addresses (one 
> > for each FQDN)
> 
> Why is no-one mentioning the SubjectAltName solution
> (http://marc.info/?l=apache-httpd-users&m=125889530300657&w=2)? Does it
> not really work or is no-one actually using it?

Because I'm tired of constantly repeating myself ;)

But I guess it'S actually contained in variant (b) listed above, since
all hostnames are listed in a single certificate. Just not using
wildcard certs (which our CA-contract does not allow, btw).

And yes, this works just fine (we're stuffing as many vhosts into a
cert as the CA allows and split off a new IP/certificate once that
overflows).
-peter

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message