RE: SSL Question: Possibly Offtopic

2001-05-22 Thread Smith Jason
You might be able to use a SSL terminator. In this case, a seperate machine acts as a proxy to your sites and handles SSL for you. The ssl load is handled by the proxy machine and your web servers are somewhat protected. This is commonly used when you want to use SSL, and you still want your I

Re: SSL Question: Possibly Offtopic

2001-05-21 Thread Markus Holmberg
AFAIK, it is not possible. The certificate needs to be sent out before the web server has had a chance to decide which certificate is appropriate (based on the HTTP Host header, which comes in after the encryption already has started). Markus On Mon, May 21, 2001 at 08:56:50AM -0500, John McGow

Re: SSL Question: Possibly Offtopic

2001-05-21 Thread James Fairbairn
> Is there some SSL limitation that only allows 1 Certificate per IP > address? Yes, or at least that's my understanding. The SSL negotiation is done before the Host: header can be sent. James