Re: how to get multiple SSL with name based vhost ?

[Krist van Besien <krist.vanbesien@xxxxxxxxx>]

You seem to be a bit confused about how to configure name based virtual hosts..


On Tue, Dec 1, 2009 at 10:53 AM, J. Bakshi <joydeep@xxxxxxxxxxxxxxx> wrote:


> ` ` ` `
> Listen 443
> NameVirtualHost  example1.de:443
>
> <VirtualHost  example1:443>
> SSLEngine on
> SSLCipherSuite HIGH:MEDIUM
> SSLProtocol all -SSLv2
> SSLCertificateFile /etc/apache2/myca/mars-server.crt
> SSLCertificateKeyFile /etc/apache2/myca/mars-server.key
> SSLCertificateChainFile /etc/apache2/myca/my-ca.crt
> ServerName https://example1.de
> ServerAlias https://example1.de
>
> DocumentRoot /srv/www/htdocs/blevti.opendingo.de
> DirectoryIndex index.php
> </VirtualHost>
>
>
> NameVirtualHost  example2.de:443
> <VirtualHost  example2:443>
> SSLEngine on
> SSLCipherSuite HIGH:MEDIUM
> SSLProtocol all -SSLv2
> SSLCertificateFile /etc/apache2/myca/mars-server.crt
> SSLCertificateKeyFile /etc/apache2/myca/mars-server.key
> SSLCertificateChainFile /etc/apache2/myca/my-ca.crt
> ServerName https://example2.de
> ServerAlias https://example2.de
>
> DocumentRoot /srv/www/htdocs/example2.de
> DirectoryIndex index.php
> </VirtualHost>

You should have only one "NameVirtualHost" statement, per IP/Port
combination, so unless you have a multi homed host this should be:

NameVirtualHost *:433

And your VirtuaHost blocks should all be like this:

<VirtualHost *:433>
ServerName example1.de
... your directives here

</VirtualHost>

<VirtualHost *:433>
ServerName example2.de
... your directives here

</VirtualHost>


etc...

It is the "ServerName" directive that tells Apache which virtualhost is which.


Krist


-- 
krist.vanbesien@xxxxxxxxx
krist@xxxxxxxxxxxxx
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx