Return-Path: Delivered-To: apmail-httpd-users-archive@www.apache.org Received: (qmail 93586 invoked from network); 2 Jan 2011 21:14:29 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 2 Jan 2011 21:14:29 -0000 Received: (qmail 62614 invoked by uid 500); 2 Jan 2011 21:14:26 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 62436 invoked by uid 500); 2 Jan 2011 21:14:26 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 62428 invoked by uid 99); 2 Jan 2011 21:14:26 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 02 Jan 2011 21:14:26 +0000 X-ASF-Spam-Status: No, hits=1.8 required=10.0 tests=FREEMAIL_FROM,FREEMAIL_REPLY,RCVD_IN_DNSWL_LOW,RFC_ABUSE_POST,SPF_PASS,T_TO_NO_BRKTS_FREEMAIL X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of mohitanchlia@gmail.com designates 209.85.212.45 as permitted sender) Received: from [209.85.212.45] (HELO mail-vw0-f45.google.com) (209.85.212.45) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 02 Jan 2011 21:14:21 +0000 Received: by vws12 with SMTP id 12so5180316vws.18 for ; Sun, 02 Jan 2011 13:14:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=l2+r5hrj67CL+ktC8DVEIjVgOzoIPSu+pPzZyejf8GU=; b=YNbpM/3rCmAmyKFP1qxHtuIuj5Bh8x6q4IC88BO3OlmoS2bIK7uzKirfhOdRSdT3zX H/mtALwEsN58yNrEpzbVEFczHGP0fIfI558o4cBmhQ+uR4c8JWsqDquucyhqZdC0sEaj zMV5WE2ahWO/fMgd3kLD05xAFzy9TI3Fic4rI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=sAke+sNlDsRp6MGtfoLiTGzXiMEVYQgzWD6aTWaFUL9X5ukW/fbcSCOhBtgYffqB9k suTJSQ+QIgMwX0pNDntxb8Kffu4lFBUvg2xwrMJeZXbZJh3jz2ckHlSdYmZDjggbNd+X j0nPI+8zbzJSkNS3MjEhr/mRg+73KJvbeHpyw= MIME-Version: 1.0 Received: by 10.220.189.138 with SMTP id de10mr6013642vcb.169.1294002839584; Sun, 02 Jan 2011 13:13:59 -0800 (PST) Received: by 10.220.68.79 with HTTP; Sun, 2 Jan 2011 13:13:59 -0800 (PST) In-Reply-To: References: Date: Sun, 2 Jan 2011 13:13:59 -0800 Message-ID: From: Mohit Anchlia To: users@httpd.apache.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Subject: Re: [users@httpd] Adding multiple keys and cert to a virtual host On Sun, Jan 2, 2011 at 12:59 PM, Eric Covener wrote: > On Sun, Jan 2, 2011 at 2:21 PM, Mohit Anchlia wr= ote: >> Apache 2: >> >> I have a need to add multiple certs and keys to a given virtual host. >> I don't see a way to add multiple keys or certs to one virtual host. >> For eg: key and cert for abc.com and def.com in > 10.10.10.101:80> >> >> Is there a way to do this? For java security for eg we use keytool. >> Can someone please suggest how to do it if it possible? > > The closest you can get is the SNI support in Apache, which will > require separate virtual hosts. > > http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI Is there no way to import all the certs and keys into one file and then just use that one file in VirtualHost? For eg: export all certs in certs.crt and keys.crt for abc.com and def.com and then use it in httpd conf file: SSLCertificateFile /usr/local/apache2/conf/ssl.crt/certs.crt SSLCertificateKeyFile /usr/local/apache2/conf/ssl.key/keys.key Trying to see the easiest way of doing it. > > >> >> --------------------------------------------------------------------- >> The official User-To-User support forum of the Apache HTTP Server Projec= t. >> See for more info. >> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org >> =A0 " =A0 from the digest: users-digest-unsubscribe@httpd.apache.org >> For additional commands, e-mail: users-help@httpd.apache.org >> >> > > > > -- > Eric Covener > covener@gmail.com > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project= . > See for more info. > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org > =A0 " =A0 from the digest: users-digest-unsubscribe@httpd.apache.org > For additional commands, e-mail: users-help@httpd.apache.org > > --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See for more info. To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org " from the digest: users-digest-unsubscribe@httpd.apache.org For additional commands, e-mail: users-help@httpd.apache.org