two domain names - one IP - both SSL

Dick Davies rasputnik at hellooperator.net
Fri Apr 30 13:39:04 PDT 2004


* Remko Lodder <remko at elvandar.org> [0410 21:10]:
> Heya,
> 
> >
> >
> >Your HTTP client is broken and isn't checking SSL certificates
> >correctly? Or you didn't meet the "one IP" requirement of the original
> >poster. Or you served up the same SSL certificate for every vhost.
> 
> Well it's not a real cert. indeed, i cannot afford that, and true, it's 
> the same certificate for every vhost i used.

Right, then that's not SSL vhosting. 

If you try to define 2 SSL vhosts on the same IP, you'll get the same
server certificate sent for each  vhost (basically you always get the
cert of the first vhost). The content is vhosted as usual.

> Well, i keep wondering then how i got my secure webmail online, secure 
> ids viewing etc.

You frigged it :) I know of certain browsers that don't tolerate duff
certificates, though most you can override it.

-- 
It's not just a computer -- it's your ass.
		-- Cal Keegan
Rasputin :: Jack of All Trades - Master of Nuns


More information about the freebsd-questions mailing list