[FUG-BR] apache + ssl

Mon, 05 Dec 2005 09:07:02 -0800 

Boa tarde

Estou com o seguinte problema

Tenho um servidor web apache2 rodando com alguns virtuals hosts com ssl

o problema é que apesar se eu ter um certificado para cada site ele carrega
sempre o certificado do primeiro virtualhost que esta configurado com SSL. No
caso da erro de endereço... o site abre so tem esse inconveniente...

Alguem faz idéia do que pode ser?

Segue abaixo meu ssl.conf e o vhosts-ssl.conf

#---- SSL.conf
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin

<IfDefine SSL>

Listen 443
AddType application/x-x509-ca-cert .cert
AddType application/x-pkcs7-crl    .crl
SSLPassPhraseDialog  builtin
SSLSessionCache         dbm:/var/run/ssl_scache
SSLSessionCacheTimeout  300
SSLMutex  file:/var/run/ssl_mutex

#Dominios com suporte a ssl
Include etc/apache2/vhosts-ssl.conf

</IfDefine>


#---- vhosts-ssl.conf

<VirtualHost *:443>
        DocumentRoot /usr/local/www/squirrelmail
        ServerAlias mail.dominio.com.br

        # Configuracao SSL / HTTPS
        SSLEngine on
        SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
        SSLCertificateFile /usr/local/etc/apache2/ssl/mail.cert
        SSLCertificateKeyFile /usr/local/etc/apache2/ssl/mail.key

        <Files ~ "\.(cgi|shtml|phtml|php|php3?)$">
            SSLOptions +StdEnvVars
        </Files>

        SetEnvIf User-Agent ".*MSIE.*" \
                 nokeepalive ssl-unclean-shutdown \
                 downgrade-1.0 force-response-1.0

<Directory "/usr/local/www/squirrelmail">
    Options Indexes FollowSymLinks
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

</VirtualHost>

<VirtualHost *:443>
        DocumentRoot /usr/local/www/horde
        ServerName webmail.dominio.com.br

        # Horde's include directory
        Include /usr/local/etc/horde
        Alias /horde "/usr/local/www/horde/"

        # Configuracao SSL / HTTPS
        SSLEngine on
        SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
        SSLCertificateFile /usr/local/etc/apache2/ssl/imp/imp.cert
        SSLCertificateKeyFile /usr/local/etc/apache2/ssl/imp/imp.key

        <Files ~ "\.(cgi|shtml|phtml|php|php3?)$">
            SSLOptions +StdEnvVars
        </Files>

        SetEnvIf User-Agent ".*MSIE.*" \
                 nokeepalive ssl-unclean-shutdown \
                 downgrade-1.0 force-response-1.0

<Directory "/usr/local/www/horde">
    Options Indexes FollowSymLinks
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

</VirtualHost>



Obrigado pela atenção



Alexandre

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.


_______________________________________________
Freebsd mailing list
Freebsd@fug.com.br
http://mail.fug.com.br/mailman/listinfo/freebsd_fug.com.br

Responder a