Re: SNI SSL per domain?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



What if I have a vhost with:

ServerName foo.tld
ServerAlias bar.tld

… but I have two separate SSL certificates for these domains? Is there any way to accommodate this without either splitting the domains onto separate vhosts or buying a new certificate that covers both domains?

-FG

On 3 Feb 2016 12:26 AM, William A Rowe Jr wrote:
Sounds like you have mis-structured the config.  Per servername - each
can and should have its own cert and will be selected via SNI.  If there
are subadmins beneath each vhost section #include those snippets and
they all still fall within the given host name.

On Feb 1, 2016 11:21 AM, "Felipe Gasper" <felipe@xxxxxxxxxxxxxxxx
<mailto:felipe@xxxxxxxxxxxxxxxx>> wrote:

    On 1 Feb 2016 12:16 PM, Oscar Knorn wrote:

        On 2016/02/01 Felipe Gasper wrote:

            Hello,

                  Is it possible to do SNI SSL per domain rather than
            per vhost? If
            not, is there a feature request in for this?

                  Thank you!

            -Felipe Gasper
            Houston, TX

            ---------------------------------------------------------------------
            To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
            <mailto:users-unsubscribe@xxxxxxxxxxxxxxxx>
            For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
            <mailto:users-help@xxxxxxxxxxxxxxxx>



        Hello Felipe,

        are'nt in your configuration the domains organized in vhost sections
        yet? Do you think, there might be a reason you can't organize
        them that way?

        Cheers Oscar


    Hi Oscar,

    Thanks for responding!

    We have end users customizing their own vhost configurations via a
    limited-access interface; hence, I can’t put one domain per vhost.

    -F

    ---------------------------------------------------------------------
    To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
    <mailto:users-unsubscribe@xxxxxxxxxxxxxxxx>
    For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
    <mailto:users-help@xxxxxxxxxxxxxxxx>



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx




[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux