httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Boyle Owen" <Owen.Bo...@six-group.com>
Subject RE: [users@httpd] how to get multiple SSL with name based vhost ?
Date Tue, 01 Dec 2009 13:50:01 GMT
> -----Original Message-----
> From: Peter Schober [mailto:peter.schober@univie.ac.at] 
> Sent: Tuesday, December 01, 2009 12:40 PM
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] how to get multiple SSL with name 
> based vhost ?
> 
> * Boyle Owen <Owen.Boyle@six-group.com> [2009-12-01 10:08]:
> > Krist explained it very nicely... But maybe you still didn't get it:
> > Without SNI, there is NO WAY TO DO THIS. It is a fundamental
> > limitation of the HTTPS protocol with no production-grade
> > work-around. SNI (server-name indication) was specifically added to
> > address this limitation. There is simply NO ALTERNATIVE.
> 
> Nonsense, and shouting does not make it correct either.
> Use X.509v3 SubjectAltName extensions in the certs, as I (and probably
> others) said several times on this very list last month alone.

<whisper>
Thanks for the reminder, peter. Oddly enough, I had a nagging suspicion
I had heard of some rather obscure alternative to SNI and now I know
where I heard it :-) But couldn't remember enough about it to find it on
Google :-( Anyway, I stand corrected. 

Sorry for afflicting your hearing - but it seemed the op wasn't getting
the point. However, at least he now has an alternative... Would you mind
helping him out with it?

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored. 

</whisper>




> (And of course SNI is preferable, once ubiquitious support for it is
> available in servers and user agents alike).
> -peter
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP 
> Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 
> 
 
This message is for the named person's use only. It may contain confidential, proprietary
or legally privileged information. If you receive this message in error, please notify the
sender urgently and then immediately delete the message and any copies of it from your system.
Please also immediately destroy any hardcopies of the message. 
The sender's company reserves the right to monitor all e-mail communications through their
networks.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message