RE: SSL Certificate on Intranet Virtual Host

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Well, this is not supported by Apache, I admit.
But in some conditions, it works.

I should have specified that you will HAVE TO use the same SSL
certificate for all virtual hosts you're accessing through SSL on THE
SAME IP.

You can use different certificates at the condition your virtual hosts
are defined on different IPs (which wouldn't make much sense anyway!).
But on the same IP / port, you can use different virtual hosts, they
will have to use the same certificate...

Olivier


Olivier CHIROUZE
I&0 Infrastructure
Volvo Information Technology

-----Original Message-----
From: Jean-Yves Avenard [mailto:jyavenard@xxxxxxxxx] 
Sent: 26 January 2007 23:41
To: users@xxxxxxxxxxxxxxxx
Subject: Re:  SSL Certificate on Intranet Virtual Host

Hi

On 1/26/07, Chirouze Olivier <olivier.chirouze@xxxxxxxxx> wrote:
> Hi,
>
> This is my first contribution to the list so please don't be too rude
if
> I'm wrong ;-)
>
> But I think we have the same situation here:
>
> Onename.server.com/
> Othername.server.com
> Somethingelse.server.com
>
That still won't work, as you can't use virtual host with SSL
certificate. Basically one port/IP address: one certificate.
As mentioned before, the SSL needs to be established before apache
http transaction gets established. So it is not aware as to which site
you're trying to get yet.

JY

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server
Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux