Solution #1 - quick hack - not a bad idea, but I hope to avoid that as
my final solution ;)

solution #2 - I'm afraid I don't quite understand what you're saying.
I'm already using NameVirtualHost. The rest of what you describe isn't
quite making sense to me as far as what I actually have to do.

Here is an excerpt from my httpd.conf file (names changed to protect the
innocent):

<VirtualHost 200.200.200.1:80>
        ServerName mydomain.com
        ServerAlias www.mydomain.com
        DocumentRoot /data/static-content/mydomain-com
        ServerAdmin [EMAIL PROTECTED]
        CustomLog /data/log/apache-access-mydomain-com combined
</VirtualHost>
<VirtualHost 200.200.200.1:443>
        ServerName mydomain.com
        ServerAlias www.mydomain.com
        DocumentRoot /data/static-content/mydomain-com
        ServerAdmin [EMAIL PROTECTED]
        CustomLog /data/log/apache-access-mydomain-com combined
        SSLEngine on
        SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
        SSLCertificateFile      /data/key/mydomain.com.crt
        SSLCertificateKeyFile   /data/key/mydomain.com.key
</VirtualHost>


And here is the kind configuration block I'd like to condense into, if
only I could work out the exact syntax:

<VirtualHost 200.200.200.1:80 200.200.200.1:443>
        ServerName mydomain.com
        ServerAlias www.mydomain.com
        DocumentRoot /data/static-content/mydomain-com
        ServerAdmin [EMAIL PROTECTED]
        CustomLog /data/log/apache-access-mydomain-com combined
        <IfDefine THIS_GUY_HAS_SSL> (or THIS_PORT_IS_443)
                SSLEngine on
                SSLCipherSuite
                        
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
                SSLCertificateFile      /data/key/mydomain.com.crt
                SSLCertificateKeyFile   /data/key/mydomain.com.key
        </IfDefine>
</VirtualHost>

Is there a way to do it?

Thank you,

Bryan








On Mon, 2001-12-17 at 10:22, Luciano Miguel Ferreira Rocha wrote:
    Well, as a quick hack, you could run two httpd deamons, one with SSL
    enable and the other without. Then you could just use <IFDefine HAVE_SSL>, etc.
    
    Another way of doing this is using NameVirtualHost. It should work painless
    with non-SSL hosts, but for the SSL ones you would still have to enumerate
    them and their configuration.
    
    Regards,
    Luciano Rocha
    
    -- 
    Luciano Rocha, [EMAIL PROTECTED]
    
    The trouble with computers is that they do what you tell them, not what
    you want.
                    -- D. Cohen
    ______________________________________________________________________
    Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
    User Support Mailing List                      [EMAIL PROTECTED]
    Automated List Manager                            [EMAIL PROTECTED]
    
    
    
    
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to