Yes, I am using Virtual hosts. I'll need to play with it more and I'll report back.

My re direct issue is actually caused by the certificate it expects to see at http://mail.myserver.com re directing to https://mail.myserver.com If I go to http://mail.myserver.com/webmail it works correctly and redirects to an https connection.

This is where SNI comes in. It allows you to use multiple certificates and points you to the correct virtual server and certificate. It has to do with the way SSL handshake works. Please note this is not supposed to work with OpenSSL 0.98e or earlier. You are supposed to be able to use either GnuTLS or SSL using SNI with 0.98f or later.

Quoting Eric Shubert <e...@shubes.net>:

SNI looks interesting, and I certainly applaud your efforts. Be sure to let us know how you make out.

You're using virtual hosts I presume?

--
-Eric 'shubes'

Maxwell Smart wrote:
I realize that it's a bit of a hack and I don't like it, but I cannot get it to work correctly otherwise. I just tried your config and it didn't work either.

You are using the webmail suffix where I am not. I am trying to get mail.myserver.com to work using SNI. I should be able to have multiple virtual servers using https and I cannot get it to work. I think part of the problem is openssl 0.9.8e SNI requires f and newer. I upgraded on my test server, but I'm still having problems getting it to work correctly.

I'll figure it out, it's just frustrating when you read the documentation and it doesn't quite work that way. Then where do you start to troubleshoot.

Quoting Eric Shubert <e...@shubes.net>:

I'm not saying that ErrorDocument won't work, just that it's a bit of a hack.

The conventional way (and 'better' for a number of reasons) is to use the RewriteEngine. I seem to recall that there's a way to turn on logging for the rewrite engine if you're having a problem with it.

Here's the RewriteRule I'm presently using:
RewriteRule ^/(webmail.*)$ https://%{SERVER_NAME}/$1 [R=301,L]

Upon closer examination, I see that
RewriteRule ^(.*/webmail*)$ https://%{SERVER_NAME}$1 [L,R]
appears to be missing a period after webmail. I believe that it should be:
RewriteRule ^(.*/webmail.*)$ https://%{SERVER_NAME}$1 [L,R]
Subtle, but big difference. I believe this would work, the same as the one I'm using above.
--
-Eric 'shubes'



---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
     If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
    Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
    For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com






Cecil Yother, Jr. "cj"
cj's
2318 Clement Ave
Alameda, CA  94501

tel 510.865.2787
http://yother.com

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.


---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
     If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
    Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
    For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


Reply via email to