Ian:

Look at Netscape's specification for the SSL protocol, RFC 2246 published by
the IETF covering TLS 1.0, or any of a number of books regarding SSL/TLS
that have been published in the last few years.

Basically, the problem is that the entire payload of the TCP/IP packet is
encrypted.  All that is visible is the IP address in the IP header.

Merton Campbell Crockett



On Thu, 21 Aug 2003, Ian Newlands wrote:

> If I hadn't already exhausted resources I would not have made this post in
> the first place.  I have tried 3 different versions of apache, searched
> through previous postings, used search engines etc. bought 2 books on apache
> and have been attempting to get this going for almost 2 months now.
>
> I'm glad you're amused by my frustration here.
>
> If there is anyone out there that is willing to submit a serious response to
> this I would appreciate it greatly.
>
> Regards,
>
> Ian Newlands
>
>
> ----- Original Message -----
> From: "Dave Paris" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Cc: "Ian Newlands" <[EMAIL PROTECTED]>
> Sent: Thursday, August 21, 2003 11:58 AM
> Subject: Re: virtual hosting
>
>
> >geeze.  is it that time of the month already for this question?  seems like
> >it was just yesterday when it was asked last .. maybe I'm just thinking of
> >the other 100,000 times it was asked.
> >
> >in all seriousness, this dead horse has been beaten so many times on this
> >list there isn't even a carcass left to hit at this point.  please go dig
> >through the mail list archives to see why name-based virtual hosts don't
> >work with SSL.
> >
> >yes, that's a flippant answer.  no, you're not likely to get a reply any
> >more serious.
> >
> >-dsp
> >
> >On Wednesday, Aug 20, 2003, at 22:09 US/Eastern, Ian Newlands wrote:
> >
> > > I am currently running about 15 virtual hosts using name based on port >
> >80, and 1 virtual host using SSL.
> > >
> > > My SSL host is currently working with the following:
> > >
> > >    <VirtualHost _default_:443>
> > >
> > > However I want to change this to the IP based hosting for this host, >
> >allowing me to then add more SSL based virtual hosts on this setup, so > I
> >tried changing this to the following:
> > >
> > >    <VirtualHost 203.xxx.xxx.xxx:443>
> > >
> > > By doing this my SSL virtual host stops working altogether.
> > >
> > > I try the following to debug it on a remote machine:
> > >
> > >    # openssl s_client -connect 203.xxx.xxx.xxx:443
> > >    CONNECTED(00000003)
> > >    27604:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown >
> >protocol:s23_clnt.c:475:
> > >
> > > I do the exact same thing on the local machine and it responds with a >
> >valid SSL response.
> > >
> > > Can anyone suggest might be wrong here?
> > >
> > > Regards,
> > >
> > > Ian Newlands
> > >
> > > _________________________________________________________________
> > > Hotmail is now available on Australian mobile phones. Go to  >
> >http://ninemsn.com.au/mobilecentral/signup.asp
> > >
> > > ______________________________________________________________________
> > > Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
> > > User Support Mailing List                      [EMAIL PROTECTED]
> > > Automated List Manager                            [EMAIL PROTECTED]
> > >
> >
> >
> >
>
> _________________________________________________________________
> Hot chart ringtones and polyphonics. Go to
> http://ninemsn.com.au/mobilemania/default.asp
>
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
> User Support Mailing List                      [EMAIL PROTECTED]
> Automated List Manager                            [EMAIL PROTECTED]
>

-- 
BEGIN:                          vcard
VERSION:                        3.0
FN:                             Merton Campbell Crockett
ORG:                            General Dynamics Advanced Information Systems;
                                Intelligence and Exploitation Systems
N:                              Crockett;Merton;Campbell
EMAIL;TYPE=internet:            [EMAIL PROTECTED]
TEL;TYPE=work,voice,msg,pref:   +1(805)497-5045
TEL;TYPE=fax,work:              +1(805)497-5050
TEL;TYPE=cell,voice,msg:        +1(805)377-6762
END:                            vcard
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to