16-Jun-99 10:52 you wrote:
> Hi all,
> I want to verify what I understand regarding running SSL on a "HTTP 1.1"
> host. From what I have learned in this mailing list, and from my own
> experience, it is entirely IMPOSSIBLE to have SSL run on a virtual host
> which does not have an IP address different from another virtual host.
Correct.
> This does not work:
> mydom.com is set up as a name based vhost with the IP 192.168.0.5
> mydom2.com is set up as a name based vhost with the IP 192.168.0.5
> mydom3.com is set up as a name based vhost with the IP 192.168.0.5
> I cannot use a separate cert for each of the above domains.
Yes, you can not. If you use 443 port for all of them, of course :-)
You can use something like https://mydom.com:4430/, https://mydom2.com:4431/,
https://mydom3.com:4432/ ... And if you wish to support all browsers with
HTTPS support ...
> This does work:
> mydom.com is set up as a ip based vhost with the IP 192.168.0.5
> mydom2.com is set up as a ip based vhost with the IP 192.168.0.6
> mydom3.com is set up as a ip based vhost with the IP 192.168.0.7
> I can use a separate cert for each of the above domains.
No problem.
> I wish to verify my findings because I have a customer who is swearing to me
> that it can be done. He is informing me that vservers.com is doing such with
> name based vhosts and allowing him to have multiple "sub domains" which are
> name based and have a separate cert for each one.
Hm. You can have www1.mydom.com, www2.mydom.com with certificate for *.mydom.com ...
Some browsers hate such certificates very badly. You can not have name-based
virtual hosts with different certificates using only standard SSL (ot TLS for
that matter). Since server must send certificate BEFORE he got name of requested
server ! May be there are some proprietary undocumented extensions in some
browsers, I do not know. BTW it's described very well in FAQ ...
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
