The technique I have seen for this is to simply serve the entire site using
SSL and link only to the areas you want as secure.



> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Nick Tonkin
> Sent: Wednesday, February 26, 2003 9:50 PM
> To: [EMAIL PROTECTED]
> Subject: securing one area of a vhost in apache 2
>
>
>
> Hello,
>
> I am using Apache/2.0.44 (Unix) mod_perl/1.99_09-dev Perl/v5.8.0
> mod_ssl/2.0.44 OpenSSL/0.9.7
>
> I have a virtual host which mostly is served without SSL. But it has one
> area, /secure,  that needs to be secured with SSL. I've tried various
> combinations of directives but can't get it to work. Right now I have:
>
> <VirtualHost 123.456.789.123:8080>
>     SSLEngine on
>     SSLProtocol all
>     SSLCipherSuite HIGH:MEDIUM
>     SSLCertificateFile /home/debug/www/_conf/certs/ladyraquel.crt
>     SSLCertificateKeyFile /home/debug/www/_conf/certs/ladyraquel.key
>     SSLCACertificateFile /home/debug/www/_conf/certs/ca.crt
>     SSLVerifyClient none
>
>     <Directory /home/debug/www/ladyraquel/secure>
>         SSLVerifyClient require
>         SSLVerifyDepth 1
>     </Directory>
> </VirtualHost>
>
> The server starts fine, serves non-SSL pages fine, but hangs when I
> request /secure .
>
> The error log has nothing, but the access log shows that the request went
> instead to the server's first virtual host, with a weird method of 'L'.
>
> Any advice much appreciated.
>
> - nick
>
> --
>
> ~~~~~~~~~~~~~~~~~~~~
> Nick Tonkin   {|8^)>
>
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
> User Support Mailing List                      [EMAIL PROTECTED]
> Automated List Manager                            [EMAIL PROTECTED]
>
>


______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to