Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of mearns.b@gmail.com designates
 209.85.218.221 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to
         :content-type;
        b=fsXnOxOoUTMqJjee7Zsh+FSOn7i8mb2ztWKaIENpUa0zAxwC2WuPyvpkZw2T4PxkQO
         PlLEbaNN9mKtm1SpFcFCDIOGAnnZuicME331c+onPRnwpohAPscaxC9Z3bcIO2A6VC6f
         OK+ziP6B3sg4zw48Yez4EVBRjIQHk3bQJHAZg=
MIME-Version: 1.0
In-Reply-To: <40795.161.203.16.1.1259700539.squirrel@mail.his.com>
References: <4B149773.9020109@infoservices.in>
 <6ed6382b0911302149n353500f2oa3d8a7dca5ebbf8e@mail.gmail.com>
	<4B14C39B.3080806@infoservices.in>
 <FDD5D99066749040AF9098A720E98977080B7893@CIWMEXZSA0E.ex.ordersx.org>
	<40795.161.203.16.1.1259700539.squirrel@mail.his.com>
From: Brian Mearns <mearns.b@gmail.com>
Date: Tue, 1 Dec 2009 15:55:59 -0500
Message-ID: <4df3a1330912011255r3ae3d783if985cfca0d6fdab2@mail.gmail.com>
To: users@httpd.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Subject: Re: [users@httpd] how to get multiple SSL with name based vhost ?

On Tue, Dec 1, 2009 at 3:48 PM, Sheryl <gubydala@his.com> wrote:
>
>> Krist explained it very nicely... But maybe you still didn't get it:
>> Without SNI, there is NO WAY TO DO THIS. It is a fundamental limitation of
>> the HTTPS protocol with no production-grade work-around. SNI (server-name
>> indication) was specifically added to address this limitation. There is
>> simply NO ALTERNATIVE.
>
> To back up a moment, though -- another way to do this is to define
> multiple IPs on the network card and run multiple instances of apache,
> each with different config files.
[snip]

That's only if he has multiple IP addresses available on the network,
right? If we assume this is a public sever, that means he needs
multiple public IP addresses from his ISP that route to this server.
That's certainly a possibility, in general, but I want to make sure
I'm not missing something awesome.

-Brian

-- 
Feel free to contact me using PGP Encryption:
Key Id: 0x3AA70848
Available from: http://keys.gnupg.net

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org