On Wed, Apr 8, 2009 at 3:59 AM, Nick Cooper <nick.cooper@xxxxxxxxxxxxxxxxxxx> wrote: > 2009/4/8 Ed Lazor <edlazor@xxxxxxxxxxxxxxxxxxxxxx> >> >> > Despite common quotations to the contrary, you /can/ successfully use >> > Name-based Virtual Hosts with SSL. The caveat is that you have to use >> > the same certificate and all the same SSL settings for all the virtual >> > hosts, but that seems to be exactly what you're asking for. The first >> > vhost that Apache finds for SSL will be used for configuring the SSL >> > aspects, but beyond that, it will do further processing with the >> > correct vhost as long as you have them listening on SSL port. >> > >> > I think that's all there is to it. I know I have it working on my >> > server: if you're having trouble, I can reference my config files for >> > you, but I won't get a change to till tomorrow night (Eastern Time). >> > >> > Hope that helps, >> > -Brian >> >> Hi Brian, >> >> Thanks for the info. Does this require VirtualHost containers for each >> domain? >> >> I ran a quick test. Using the VirtualDocumentRoot parameter, creating >> one virtual host container with the IP of that I want to use... I can >> access all of the local domains via https, but the document root >> always points to the virtualhost container used to provide the SSL >> info - or, I found that removing the documentroot parameter in there >> caused the system to revert to the general documentroot specified in >> httpd.conf. I'm testing the parameters within PHP, using phpinfo, if >> that helps. >> >> -Ed > > Yes it is possible to do with a VirtualDocumentRoot but the thing to > remember is the value of DocumentRoot does not equal VirtualDocumentRoot. > If DocumentRoot is important in your applications you can use > multiple VirtualHosts with SSL by using different port numbers. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sorry, I don't know about VirtualDocumentRoot (never used it, don't really know what it's for), but if you mean that you're using PHP to see what the DocumentRoot is, for instance, I think a better test is to just set up different pages in the different document roots and test it that way (i.e., see which page gets served). In my set up, I use a different vhost container for each host, and they each have their own DocumentRoot. - -Brian - -- Feel free to contact me using PGP Encryption: Key Id: 0x3AA70848 Available from: http://pgp.mit.edu/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iQEcBAEBAgAGBQJJ3IZZAAoJEHOUulIkSI7cFy4H/iOLxtn+P/OX8P0K1EPi5VTd DgFuuDe9v1wiL4g6sn5VX7U56dgRt68jr54PepuJAmmlNQrgcShCGTSuk8qO847X T/KLb0u48zODGdmW6ZHY6GbYjrecdKjHmYaoqEKS16OPnenkt4ULt6E/Z74OIyhA AXpZVV0U/Tc+/BKtpw8sJmU7TMEH+3cPd6yZgdyIGLll6aJvnBkUhC7ya0XmTQEk CAaHeycvJkD0/4kOGaqQT+97wF1yZgNgQRZLEt84d08Op1285kODJ3fYTUyv04CF 5v5bzvA2S6ARCQwcslyx9EHwgkmbhycM+8p4G0wbmqRWSMCwaCb4pCazVJwfMSg= =znEN -----END PGP SIGNATURE----- --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|