Multiple SSL certs for name-based virtual hosts aren't possible based upon the way SSL is designed. Each site requiring a separate cert must have it's own IP address.
--- Shawn Syms | Systems Administrator Infinet Communications | [EMAIL PROTECTED] --- -----Original Message----- From: Thomas Sandor [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 03, 2002 1:20 PM To: [EMAIL PROTECTED] Subject: how to add multiple SSL cert for each virtual host? hi everyone, I have an apache 2.0.40 installed on a RedHat 7.2 box, complied with ssl (openssl 0.9.6g). Till now I had only one domain for which apache should use SSL cert files (crt, key), but for our next project I have to add another SSL cert file a specific domain. I have NameVirtualHost 12.34.56.78 and have a list of <virtualhost/> for each of our domain, using ServerNamed base aliases, but for the ssl conf it ain't works. In my ssl.conf in short looks like this: NameVirtualHost 12.34.56.78:443 <VirtualHost 12.34.56.78:443> ServerName domain1.com CustomLog "..." ErrorLog "..." SSLEngine on SSLCertificateFile "/somewhere/ssl.crt/domain1.crt" SSLCertificateKeyFile "somewhere/ssl.key/domain1.key" </VirtualHost> <VirtualHost 12.34.56.78:443> ServerName domain2.com CustomLog "..." ErrorLog "..." SSLEngine on SSLCertificateFile "/somewhere/ssl.crt/domain2.crt" SSLCertificateKeyFile "somewhere/ssl.key/domain2.key" </VirtualHost> The problem is that apache does not serve domain2 cert files for domain2, it uses the first declaration for every https://domainX.com invoke. Does anyone know how to tell apache to uses specific SSL cert I'd like to define for each of my virtualhosts? Thanks in advance for any help. Regards, Thomas ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]