Re: SNI SSL per domain?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



common.conf:

<Locationwhatever...
...
...
---------------------------

<VirtualHost *:443>
  ServerName foo.tld

  SSLCertificateFile foo.pem

  Include common.con
</VirtualHost>
<VirtualHost *:443>
  ServerName bar.tld

  SSLCertificateFile bar.pem

  Include common.con
</VirtualHost>


> Am 03.02.2016 um 11:45 schrieb Felipe Gasper <felipe@xxxxxxxxxxxxxxxx>:
> 
> What if I have a vhost with:
> 
> ServerName foo.tld
> ServerAlias bar.tld
> 
> … but I have two separate SSL certificates for these domains? Is there any way to accommodate this without either splitting the domains onto separate vhosts or buying a new certificate that covers both domains?
> 
> -FG
> 
> On 3 Feb 2016 12:26 AM, William A Rowe Jr wrote:
>> Sounds like you have mis-structured the config.  Per servername - each
>> can and should have its own cert and will be selected via SNI.  If there
>> are subadmins beneath each vhost section #include those snippets and
>> they all still fall within the given host name.
>> 
>> On Feb 1, 2016 11:21 AM, "Felipe Gasper" <felipe@xxxxxxxxxxxxxxxx
>> <mailto:felipe@xxxxxxxxxxxxxxxx>> wrote:
>> 
>>    On 1 Feb 2016 12:16 PM, Oscar Knorn wrote:
>> 
>>        On 2016/02/01 Felipe Gasper wrote:
>> 
>>            Hello,
>> 
>>                  Is it possible to do SNI SSL per domain rather than
>>            per vhost? If
>>            not, is there a feature request in for this?
>> 
>>                  Thank you!
>> 
>>            -Felipe Gasper
>>            Houston, TX
>> 
>>            ---------------------------------------------------------------------
>>            To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>>            <mailto:users-unsubscribe@xxxxxxxxxxxxxxxx>
>>            For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>>            <mailto:users-help@xxxxxxxxxxxxxxxx>
>> 
>> 
>> 
>>        Hello Felipe,
>> 
>>        are'nt in your configuration the domains organized in vhost sections
>>        yet? Do you think, there might be a reason you can't organize
>>        them that way?
>> 
>>        Cheers Oscar
>> 
>> 
>>    Hi Oscar,
>> 
>>    Thanks for responding!
>> 
>>    We have end users customizing their own vhost configurations via a
>>    limited-access interface; hence, I can’t put one domain per vhost.
>> 
>>    -F
>> 
>>    ---------------------------------------------------------------------
>>    To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>>    <mailto:users-unsubscribe@xxxxxxxxxxxxxxxx>
>>    For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>>    <mailto:users-help@xxxxxxxxxxxxxxxx>
>> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx





[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux