Yeak Nai Siew wrote:
>
> on 25/6/00 4:41 AM, Ralf S. Engelschall at [EMAIL PROTECTED] wrote:
>
> > On Fri, Jun 23, 2000, Thomas A. Halter wrote:
> >
> >> How do you run multiple secure domains on the same server? I tried and it
> >> was not working and I could find no FAQ's or guidance on the subject. I
> >> have two sites, with two seperate keys and crt's. Can they run on the same
> >> server or must they run on seperate servers?
1) They must run on the same server.
2) The keys have to have same password.
3) They need different IPs.
> > They can be served by the same Apache run-time instance. All you have to do
> > is configure separate <VirtualHosts> for the individual domains. See the
> > Apache documentation on virtual hosting for details, please.
>
> Isn't it only work on hardware virtual hosting (i.e. one unique IP address
> for one SSL site)? The documentation explained the "chicken-and-egg" issue
> regarding the SSL implementation. Or perhaps there are now possible way to
> use software virtual hosting (i.e. named based, one unique IP address for
> multiple virtual domain)....
There is no hardware vs. software virtual hosting (the same network card will
do for all IPs). The SSL handshake has to take place before the HTTP request is
passed to the server, in order to secure the content of the request (it can
contain sensitive info). Therefore if the same IP has several virtual secure
sites, there is no way for the server to know which one was called at the time
of the handshake. Note that you still can have as many non secure sites for the
same IP as you want.
Some people on this list did experiment with passing the servername during the
handshake. I haven't heard anyone reporting success. Anyone?
S/MIME Cryptographic Signature
