Changing Apache

[Matthew Seaman]

On Fri, Jan 02, 2004 at 03:03:39PM -0500, Marius Kirschner wrote:
> > > Also, if I get a certificate for www.whatever.com will I be able to 
> > > refer to it via http:// and https://?
> > 
> > Well, ish.  When you compile the port, you will be given the 
> > option to generate several flavours of test key.  These will 
> > permit the HTTPS server to work, but visitors will get 
> > pop-ups all the time warning that your site isn't trusted.  
> > You will have to generate a .csr (Certificate Signing 
> > Request) and send it off to one of the CAs to get it signed 
> > by a recognised key, and then everything will work smoothly.
> 
> Well, I realize I need to get an "official" certificate to avoid those
> annoying pop-ups, but what I'm not sure about is whether I can go with a
> cert for www.whatever.com and use that for my https pages, or if I need to
> get a cert for something like secure.whatever.com and use that for https
> while the www.whatever.com will remain strictly http?
> 
> I guess what I'm asking is, in the httpd.conf can I have 1 entry for the
> same virtualhost - one for port 80 and the other for 443?

Yes, you can have both http://www.example.com/ and
https://www.example.com/ simultaneously on the same server -- these
can have entirely separate content or can have exactly the same.

Or you can have separate virtual hosts with distinct names for HTTP
and HTTPS services.  Just make sure that the DN (Distinguished Name)
in the certificate you generate matches whatever you call your HTTPS
server.

Also, if you need more than one HTTPS virtual host on your machine, be
aware that you will need separate IP for each HTTPS vhost.  (It's a
catch 22 -- with Name Virtual Hosts the appropriate virtual host name
is selected using a field in the HTTP packet, but with HTTPS you need
to know which vhost the packet is intended for so that you can decode
it and work out which vhost the packet is for...

	Cheers,

	Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.                       26 The Paddocks
                                                      Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey         Marlow
Tel: +44 1628 476614                                  Bucks., SL7 1TH UK
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20040102/96f0edef/attachment.bin