Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: local policy)
Message-ID: <4D42724D.7090809@ics.muni.cz>
Date: Fri, 28 Jan 2011 08:37:49 +0100
From: Martin Kuba <makub@ics.muni.cz>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; cs-CZ;
 rv:1.9.2.13) Gecko/20101206 SUSE/3.1.7 Thunderbird/3.1.7
MIME-Version: 1.0
To: users@httpd.apache.org
References: <4D422127.2030409@free-man.net>
In-Reply-To: <4D422127.2030409@free-man.net>
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
 micalg=sha1; boundary="------------ms010107080604080304020102"
Subject: Re: [users@httpd] mod_ssl and virtual host

--------------ms010107080604080304020102
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable

Dne 28.1.2011 02:51, bfree@free-man.net napsal(a):
> The certificate is not trusted because it is self-signed.
> The certificate is only valid for free-man.net
>
> what am I doing wrong?

You can not use name-based virtual hosts for SSL if your Apache is older =
than 2.2.12
or your OpenSSL does not support SNI or the client is MSIE on Windows XP.=


In other words, you need a separate IP address for each SSL certificate,
because the SSL connection is established before the HTTP connection take=
s place
and the server does not know which certificate to choose.

See
http://httpd.apache.org/docs/2.2/ssl/ssl_faq.html#vhosts
http://en.wikipedia.org/wiki/Server_Name_Indication

Use IP-based virtual hosts instead.

Cheers

Martin
--=20
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Supercomputing Center Brno             Martin Kuba
Institute of Computer Science    email: makub@ics.muni.cz
Masaryk University             http://www.ics.muni.cz/~makub/
Botanicka 68a, 60200 Brno, CZ     mobil: +420-603-533775
--------------------------------------------------------------


--------------ms010107080604080304020102
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms010107080604080304020102--