Re: Apache SSL named based virtual hosts

2011-01-25 Thread Jochen Schulz
Bob Proulx: Jochen Schulz wrote: Modern browsers appear to support that TLS extension: https://secure.wikimedia.org/wikipedia/en/wiki/Server_Name_Indication#Browser\ s I will implement this in a test installation and get some experience with this feature. The future looks brighter! The

Apache SSL named based virtual hosts

2011-01-24 Thread Bob Proulx
In another thread: Boyd Stephen Smith Jr. wrote: ... Apache (from upstream) has supported it for a while and I've had it in production (system based on Ubuntu Maverick) for a number of months. Re: NameVirtualHost *:443 This is good to hear but if so then how do they pull that off? I thought

Re: Apache SSL named based virtual hosts

2011-01-24 Thread David Sastre
On Mon, Jan 24, 2011 at 01:23:35PM -0700, Bob Proulx wrote: In another thread: Boyd Stephen Smith Jr. wrote: Is there a way to have all of the browsers use starttls for https ... and to be able to share virtual hosts with SSL on a single IP address? That would be awesome! Where can I read

Re: Apache SSL named based virtual hosts

2011-01-24 Thread Boyd Stephen Smith Jr.
In 20110124202335.ga5...@hysteria.proulx.com, Bob Proulx wrote: In another thread: Boyd Stephen Smith Jr. wrote: ... Apache (from upstream) has supported it for a while and I've had it in production (system based on Ubuntu Maverick) for a number of months. Re: NameVirtualHost *:443 This is

Re: Apache SSL named based virtual hosts

2011-01-24 Thread Jochen Schulz
Bob Proulx: Boyd Stephen Smith Jr. wrote: ... Apache (from upstream) has supported it for a while and I've had it in production (system based on Ubuntu Maverick) for a number of months. Re: NameVirtualHost *:443 This is good to hear but if so then how do they pull that off? I thought

Re: Apache SSL named based virtual hosts

2011-01-24 Thread Boyd Stephen Smith Jr.
In 201101241443.22084@iguanasuicide.net, Boyd Stephen Smith Jr. wrote: http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI I believe Lenny does actually have a recent enough version of both apache2 and libssl0.9.8, but I've not tried using SNI with Lenny's version of Apache. (Correcting

Re: Apache SSL named based virtual hosts

2011-01-24 Thread Bob Proulx
Jochen Schulz wrote: The problem is/was that the TLS handshake was initiated before the HTTP request was sent. Since only the request included the Host-Header, the web server couldn't show a certificate for the requested domain name. A better explanation can be found here: