Examine the certificates returned in this configuration. Only one
certificate will be used. My experience, is the cert from the )default gets
used. With Apache 1.3.19 and above, you can make this work using a unique IP
address for each ssl Virtual Host.

On Solaris it is easy to add multiple IPs to a single NIC. (see.. ifconfig
addif). I "think?" this can be easily done on Linux as well.

         NameVirtualHost someip_1:443

         <VirtualHost someip_1:443>
                 ServerName              your.server.and.domain
                 # Then just fill in all the server info for that virtual
host
         </VirtualHost>

         NameVirtualHost someip_2:443

         <VirtualHost someip_2:443>
                 ServerName              your.other.server.and.domain
                 # Then just fill in all the server info for that virtual
host
         </VirtualHost>

In addition, DNS must resolve someip_1 to your.server.and.domain and
someip_2 to your.other.server.and.domain.

On Solaris I have had to add to /etc/hosts:
someip_1 your.server.and.domain 
someip_2 your.other.server.and.domain

Hope this helps,
David Marshall

-----Original Message-----
From: Are Hoel [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 06, 2001 7:08 AM
To: [EMAIL PROTECTED]
Subject: Re: Did it pass?


At 10:28 06.09.2001 +0200, you wrote:
>That's the chicken and egg problem, you need a different IP
>for each SSL-based VirtualHost: 
>http://www.modssl.org/docs/2.8/ssl_faq.html#ToC47

I have actually managed to get this working with only one IP :)

Here's the settings from my conf file:

<IfDefine SSL>

### SSL servers

         NameVirtualHost *:443

         <VirtualHost _default_:443>
                 # Put all the host info for the default host in here
         </VirtualHost>

         <VirtualHost *:443>
                 ServerName              your.server.and.domain
                 # Then just fill in all the server info for that virtual
host
         </VirtualHost>

         <VirtualHost *:443>
                 ServerName              your.other.server.and.domain
                 # Then just fill in all the server info for that virtual
host
         </VirtualHost>

</IfDefine>

I think you have to put the _default_ virtual host in the top to get it 
working propperly...


___________________________________________________________________
  Are Hoel
  Mail: [EMAIL PROTECTED]                Snail: Grøm Studenthjem, 321
   UIN: 4620387                            N-4877 Grimstad
   Mob: +47 90724295                       Norway

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to