multiple SSL key's on one IP several Vhosts...

[David Lubowa]

how will a setup like this sound to you ....

1. create a directory vhost_80 and vhost_ssl
2. create a file .vhost.conf in your created directories chowned www:www
3. have an Include /path/to/vhost_80 (this is under the none default ssl
Vhost) this is done in the httpd.conf
4. have an Include /path/to/vhost_ssl (this is under the default ssl Vhost)
this is done in the httpd.conf
5. in the vhost_* directories you could have something like this:

vhost_80:
----------

* you have a file foo.bar.com and within that file you have

#foo.bar.com Vhost#
    ServerAdmin webmaster at blah.com
    DocumentRoot /blah/bloo/blue
    ServerName mine.foo.bar.com
    ErrorLog /var/log/httpd/blah/error.log
    CustomLog /var/log/httpd/blah/access.log common

and in the .vhost.conf file you have a line like Include
/path/to/vhost_80/foo.bar.com

this will make your Vhost accessable , you do the same for the vhost_ssl,
with all the ssl stuff within, you could write a script to do all this for
you , which could be a good idea rather than doing alot of hard work :)

i hope this helps

cheers

david

-----Original Message-----
From: owner-freebsd-isp at freebsd.org
[mailto:owner-freebsd-isp at freebsd.org]On Behalf Of Andrew Lewis
Sent: Wednesday, April 16, 2003 5:15 PM
To: freebsd-isp at FreeBSD.ORG
Subject: RE: multiple SSL key's on one IP several Vhosts...


Just to be clear on what I'm reading...

Apache is listening on a single IP, ports 443 and 80.
Apache hosts multiple http sites with name based virtual hosts
Apache also hosts multiple https sites with their own certificates
(www.domain1.com and www.domain2.com) as name based virtual hosts.

(seamlessly)

I understood this to be an impossible task with https servers, based on the
key exchange process.

Am I reading that apache does this just fine?  If so I know some developers
who will be thrilled.




> -----Original Message-----
> From: Noah K Sematimba [mailto:ksemat at ksemat.co.ug]
> Sent: Wednesday, April 16, 2003 5:21 AM
> To: George Georgalis
> Cc: freebsd-isp at FreeBSD.ORG
> Subject: Re: multiple SSL key's on one IP several Vhosts...
>
>
>
> > It's from May 1999, but looks possible since different
> certs are bing
> > used for different IP/domains; however I have the feeling
> apache will
> > choke on the second ssl IP. Has anyone used a similar setup or have
> > comments?
>
> works fine. I was using apache-modssl in my case.
>
> Noah.
> _______________________________________________
> freebsd-isp at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> To unsubscribe, send any mail to "freebsd-isp-unsubscribe at freebsd.org"
>
_______________________________________________
freebsd-isp at freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-isp
To unsubscribe, send any mail to "freebsd-isp-unsubscribe at freebsd.org"