Re: SSL certificates and virtual hosts

Greg Fennell <fennellgb@xxxxxxxxxxxxx> · Tue, 18 Oct 2011 09:33:28 -0700

You can only have 1 SSL per IP address, the 2nd host you have in your 

list (retailmastery.com) isn't an IP it's a name which is using the 

fixed IP.  You would need to get a 2nd IP address on your server for a 

2nd SSL.

On 10/18/2011 9:27 AM, James Moe wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,
   Our website account with our ISP has one fixed IP address and allows
a number of virtual hosts. The main site has an SSL certificate for
secure access. I wish to add another certificate for one of the named
virtual hosts. According to Tech Support the account only allows one
SSL certificate per IP address.
   The secure setup is like this:

Listen 66.84.59.125:443
<VirtualHost 66.84.59.125:443>
   ServerName sohnen-moe.com:443
   ... the usual SSLCertificate* directives to the SSL files ...
</VirtualHost>

   Despite the claim of only one certificate per IP, I tried adding the
following vhost to the configuration file:

NameVirtualHost retailmastery.com:443
<VirtualHost retailmastery.com:443>
     ServerName retailmastery.com:443
     DocumentRoot /home/www/rm1
     SSLEngine on
   ... the usual SSLCertificate* directives to other SSL files ...
</VirtualHost>

   It does not work.
   Is the claim of only one cert per IP address correct? Or have I made
an error in the configuration?

- -- 

James Moe

moe dot james at sohnen-moe dot com
520.743.3936
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk6dqQYACgkQzTcr8Prq0ZO9oACfUHAJ34StjeetvPp/B+//6mno
RNoAnRzqGA1wm+dcolxwNw0HvLfqbi8c
=njxM
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See<URL:http://httpd.apache.org/userslist.html>  for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
    "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx