Re: SSl Redirect

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

please configure your mailer to wrap lines below 80 characters per line.
72 to 75 is usually OK.

Thank you.

On 08.04.09 09:04, Stephen Goldschmidt wrote:
> my question is the certificate is only assigned to one domain name.
> www.domain.com
> 
> so in my browser if i go to www.domain.com or domain.com the ssl
> certificate works with no problems.
> 
> i am having an issue with having www.domain.org and www.domain.net
> redirect to www.domain.com over port 443. Since apache does not support
> NamedVirthual Hosts over port 443

It does. Even SSL virtual hosts (you should mention that, plain https can
run on port 443 too). The problem is that the clients will complain, when
they connect to IP:port and they get SSL certificate for (www.)domain.com
instead of expected (www.)domain.net, (www.)domain.org or anything else they
were directed to.

> how can i create a virtual host using
> the name and alias of www.domain.net and www.domain.org using port 443 and
> redirect to vhost www.domain.com?
> 
> if i try to add a second vhost using the same ip and port apache does not
> like it but i don't want to use another routeable ip to get this to work.

If "apache does not like it" meant that apache complains about running
name-based SSL virtual hosts, you can leave it as it is - however clients
connecting to other virtual host using .net or .org will complain before
redirection. Different solutions would mean getting another certificates (and
IPs, because key renegotiation is not so widely supported afaik).

> can i add the redirect of y and z domain inside of the <virtualhost> for x
> domain? i tried it by addind redirect / https://domain.com/ and the site
> just sits in a loop and does not open. am i missing something or does this
> redirect have to be tagged otherway first?

You must either add other virtual host to match different names, or play
with rewrites. There's module "redirtoservname" somewhere, that does the
same jobs for any server aliases, with this it should be enough to configure
one virtual host.

-- 
Matus UHLAR - fantomas, uhlar@xxxxxxxxxxx ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
There's a long-standing bug relating to the x86 architecture that
allows you to install Windows.   -- Matthew D. Fuller

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux