Re: [users@httpd] multiple instances of apache and ssl

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 2/24/06, John Beck <john@xxxxxxxxxxxx> wrote:
> Hello,
>   We run multiple instances of apache 2.0.55 on the same server. Each
> instance has it's own IP address.
>
>  I have been trying without success to run SSL on more than one instance
>  at the same time. Usually if I specify the IP in a virtualhost section
> of the ssl.conf then the first instance of apache starts listening on
> all the IPs specified in ssl.conf.

Since you tell apache to listen to all IPs is does exactly that. You
need to tell your first apache to only listen to the first IP, and
your second apache instance to listen to the second IP.

> Is there a way to use make apache use a different ssl.conf than the
> default in /opt/apache2/conf/ssl.conf.

Ofcourse this is possible. Have a look in your configuration files for
the "Include" statement.

> I have also tried to run the ssl
> in each individial httpd-server1.conf and httpd-server2.conf files but
> it seems to not recognize the SSLENGINE or any other SSL configurations.

For SSL directives to be recognised you need mod_ssl to be loaded. In
the standard apache config file distributed with the software this is
done when you add  -D SSL as startup option, or start with apachectl
startssl (which does the same).

In the standard apache config that you got with your distribution the
SSL option also triggers the loading of a seperate ssl.conf file.

I would do the following:

make a ssl1.conf and a ssl2.conf. In these files you put the SSL
configuration for server 1 and server 2 resp.

In httpd-server1.conf look for the following lines:

<IfModule mod_ssl.c>
    Include conf/ssl.conf
</IfModule>

And change ssl.conf in to ssl1.conf.

httpd-server2.conf change ssl.conf to ssl2.conf.

You now have two seperate ssl configs for your two seperate apache instances.

Krist


--
krist.vanbesien@xxxxxxxxx
Solothurn, Switzerland

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux