You might want to investigate using a wildcard cert, then name-based virtual hosting can work with SSL. This requires that your hosts all be from the same domain ( x.foo.com, y.foo.com etc. ) Similarly, mod_gnutls ( http://www.outoforder.cc/projects/apache/mod_gnutls ) permits Name-based virtual hosts with SSL using Server Name Indication (SNI). I don't know that I'd want to run it on a production site yet and SNI isn't supported on all browsers. Matt ----- Original Message ----- From: "Joshua Slive" <joshua@xxxxxxxx> To: users@xxxxxxxxxxxxxxxx Sent: Sunday, March 30, 2008 9:39:39 AM GMT -06:00 US/Canada Central Subject: Re: Name-based virtual hosting with SSL On Sun, Mar 30, 2008 at 3:36 AM, Vinay Purohit <Vinay.Purohit@xxxxxxxxxx> wrote: > > Hi, > > Why Name-based virtual hosting cannot be used with SSL secure servers ? Because in order to choose the correct certificate to negotiate the secure connection, the server must know what name to use. But the name in the request is only available after the secure connection has been negotiated. Joshua. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|