Re: [apache-ssl] SSL and Virtual Hosts
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [apache-ssl] SSL and Virtual Hosts



Mod_ssl is the same way.  I think it's the way it has to be, since you must store a
session cache for visitors.  I don't know of any products that are not that way.  It
isn't that hard to get more IP's, is it?

Victor wrote:

> Is this part of the design or is it just the way Apache-SSL works?
> Are there products that do support many Certificates for an IP? Mod-ssl perhaps?
>
> Thanks for your help
>
> Mark Holt wrote:
>
> > That is the old syntax for the VirtualHost tag, and at any rate it would not make
> > any difference.  You can only serve one certificate on a given IP address and
> > port.  If you can't get any more IP's, add the following:
> >
> > Listen 443
> > Listen 444
> > Listen 445
> >
> > <VirtualHost 10.0.30.4:443>
> >         ServerName www.site-one.com
> >         ...
> > </VirtualHost>
> >
> > <VirtualHost 10.0.30.4:444>
> >         ServerName www.site-two.com
> >         ...
> > </VirtualHost>
> >
> > <VirtualHost 10.0.30.4:445>
> >         ServerName www.site-three.com
> >         ...
> > </VirtualHost>
> >
> > Then change your URLs to be http://www.site-two.com:444/ and
> > http://www.site-three.com:445/. That or get some more IP's.
> >
> > Victor wrote:
> >
> > > What if I have a domain in there instead of an IP address, would that work? I
> > > mean it would still use the same IP but it would be different domain?
> > >
> > > <VirtualHost www.site-one.com>
> > > <VirtualHost www.site-two.com>
> > > <VirtualHost www.site-three.com>
> > >
> > > Mark Holt wrote:
> > >
> > > > SSL cannot support two certificates on the same IP address and port.  Use
> > > > another IP address or another port.
> > > >
> > > > Victor wrote:
> > > >
> > > > > I am having problems setting up SSL in Virtual Hosts. I have multiple
> > > > > virtual hosts on the same IP (this setup works great on unsecure sites).
> > > > > However, with SSLEnabled areas, no matter which site I go to, I get the
> > > > > first ssl site.