Tuesday, Tuesday, August 21, 2001, 9:55:58 PM, Robert wrote:

> Is it possible to install a WebCert for a virtual domain, or can it only be
> installed for the entire root server?
> I'm running Apache + Mod_SSL, and a number of virtual domains. It's a few of
> the virtual domains that I'd like the cirtificates attached to?
> A bit of a mystery at this stage - even looking at the howto's

If they are IP based virual hosts, then you can get them their own
certificate.  But if you are using Name Based http1.1 virutal hosting,
then no, that is not compatible with SSL.

There is one solution, however.  You could assign them different
ports.

For example, they are all on the same IP but the SSL site is linked to
in one of the following formats:

<A HREF="https://securesite.number1.com:8000/";>Click Here For Secure
Site 1</a>
<A HREF="https://securesite.number2.com:8001/";>Click Here For Secure
Site 2</a>
<A HREF="https://securesite.number3.com:8002/";>Click Here For Secure
Site 3</a>

A unique IP/Port combination is required for each SSL Certificate.

Most sites' customers get to the secure site by either a redirection
from the non-ssl site, or by clicking a link on the non-ssl site.
Thus, this issue with ports is really not one with a negative customer
impact.

The only time it is not preferable is if you have a site where people
are going to be typing https://securesite/ which is VERY rare in my
experience.

But to address this, you could create a "Default" generic site on the
regular ssl port (443) that links to the SSL sites that you host on
that IP with the correct linkage.

-- 
Best regards,
William X Walsh <[EMAIL PROTECTED]>
Userfriendly.com Domains
The most advanced domain lookup tool on the net
DNS Services from $1.65/mo

Reply via email to