Re: Questions about implementing SSL/VirtualHosts

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



* Boyle Owen <Owen.Boyle@xxxxxxxxxxxxx> [2009-12-15 10:22]:
> > -----Original Message-----
> > From: Justin Pasher [mailto:justinp@xxxxxxxxxxxxxxxxxxx] 
> > (a) Single FQDN, single DocumentRoot - Single IP.
> > (b) Multiple FQDN, single DocumentRoot - Single IP, assuming cert 
> > supports all (sub)domains listed. Otherwise Multiple IP
> > (c) Multiple FQDN, multiple DocumentRoot - Multiple IP addresses (one 
> > for each FQDN)
> 
> Why is no-one mentioning the SubjectAltName solution
> (http://marc.info/?l=apache-httpd-users&m=125889530300657&w=2)? Does it
> not really work or is no-one actually using it?

Because I'm tired of constantly repeating myself ;)

But I guess it'S actually contained in variant (b) listed above, since
all hostnames are listed in a single certificate. Just not using
wildcard certs (which our CA-contract does not allow, btw).

And yes, this works just fine (we're stuffing as many vhosts into a
cert as the CA allows and split off a new IP/certificate once that
overflows).
-peter

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux