multiple SSL key's on one IP several Vhosts...

Enno Davids enno at doc.metva.com.au
Wed Apr 16 07:29:48 PDT 2003


On Wed, Apr 16, 2003 at 10:15:11AM -0400, Andrew Lewis wrote:
|Just to be clear on what I'm reading...
|
|Apache is listening on a single IP, ports 443 and 80.
|Apache hosts multiple http sites with name based virtual hosts
|Apache also hosts multiple https sites with their own certificates
|(www.domain1.com and www.domain2.com) as name based virtual hosts.
|
|(seamlessly)
|
|I understood this to be an impossible task with https servers, based on the
|key exchange process.
|
|Am I reading that apache does this just fine?  If so I know some developers
|who will be thrilled.

No. He's fairly clear that different IP addresses are involved. i.e. we're
talking about old style IP based virtual hosts not name based virtual hosts.


Enno.



|> -----Original Message-----
|> From: Noah K Sematimba [mailto:ksemat at ksemat.co.ug] 
|> Sent: Wednesday, April 16, 2003 5:21 AM
|> To: George Georgalis
|> Cc: freebsd-isp at FreeBSD.ORG
|> Subject: Re: multiple SSL key's on one IP several Vhosts...
|> 
|> 
|> 
|> > It's from May 1999, but looks possible since different 
|> certs are bing
|> > used for different IP/domains; however I have the feeling 
|> apache will
|> > choke on the second ssl IP. Has anyone used a similar setup or have
|> > comments?
|> 
|> works fine. I was using apache-modssl in my case.
|> 
|> Noah.
|> _______________________________________________
|> freebsd-isp at freebsd.org mailing list
|> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
|> To unsubscribe, send any mail to "freebsd-isp-unsubscribe at freebsd.org"
|> 
|_______________________________________________
|freebsd-isp at freebsd.org mailing list
|http://lists.freebsd.org/mailman/listinfo/freebsd-isp
|To unsubscribe, send any mail to "freebsd-isp-unsubscribe at freebsd.org"


More information about the freebsd-isp mailing list