[users@httpd] Mutiple IP/Multiple SSL

2018-07-19 Thread Robert Earnest Lassiter
Cannot determine if it's possible to run multiple SSL with individual IP/SSL site on same server(ubuntu). We run multiple domains and would like to stack these SSL sites if it's possible. No issue multihoming the NIC, no issue multiple domains/server on port 80 - only issue is apache finding the

Re: [users@httpd] Mutiple IP/Multiple SSL

2018-07-19 Thread Yehuda Katz
You can definitely do this. For each VirtualHost, make sure you have ServerName set to the main web site and ServerAlias set for any additional name that the SSL certificate is good for. When a request comes in, Apache compares the SNI information in the request to the ServerName/Aliases that it kn

[users@httpd] SSLCertificateChainFile

2018-07-19 Thread apache
I am putting to together a config for both RH6 and RH7 systems. RH6 used Apache/2.2.15, RH7 uses Apache/2.4.6. I understand that in 2.4.8 SSLCertificateChainFile is deprecated and the intermediates should be appended to the file that SSLCertificateFile points to. Can 2.2 and < 2.4.8 wo

Re: [users@httpd] SSLCertificateChainFile

2018-07-19 Thread Yehuda Katz
You can use a tool like https://www.ssllabs.com/ssltest/ to check the chain (and other settings) or you can use openssl (openssl s_client -showcerts -connect www.example.com:443). As you found, putting the chain in the certificate file should work. - Y On Thu, Jul 19, 2018 at 2:47 PM wrote: > I