RE: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-15 Thread Boyle Owen
-Original Message- From: Justin Pasher [mailto:just...@newmediagateway.com] Many others have provided some information, but here's a basic summary (assuming no SNI support): (a) Single FQDN, single DocumentRoot - Single IP. (b) Multiple FQDN, single DocumentRoot - Single IP,

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-15 Thread Peter Schober
* Boyle Owen owen.bo...@six-group.com [2009-12-15 10:22]: -Original Message- From: Justin Pasher [mailto:just...@newmediagateway.com] (a) Single FQDN, single DocumentRoot - Single IP. (b) Multiple FQDN, single DocumentRoot - Single IP, assuming cert supports all (sub)domains

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-15 Thread Dan Schaefer
Peter Schober wrote: * Boyle Owen owen.bo...@six-group.com [2009-12-15 10:22]: -Original Message- From: Justin Pasher [mailto:just...@newmediagateway.com] (a) Single FQDN, single DocumentRoot - Single IP. (b) Multiple FQDN, single DocumentRoot - Single IP, assuming cert supports

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-14 Thread Serge Fonville
Hi, My company is wanting to keep this configuration for port 80 and add an SSL certificate for just the www.example.com and example.com hostnames. Is it possible to have Virtualhosts for just the 443 port and still allow *.example.com to react the same way it does now? Yes, it is. However,

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-14 Thread Justin Pasher
Serge Fonville wrote: Hi, My company is wanting to keep this configuration for port 80 and add an SSL certificate for just the www.example.com and example.com hostnames. Is it possible to have Virtualhosts for just the 443 port and still allow *.example.com to react the same way it does

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-14 Thread Dan Schaefer
Justin Pasher wrote: Serge Fonville wrote: Hi, My company is wanting to keep this configuration for port 80 and add an SSL certificate for just the www.example.com and example.com hostnames. Is it possible to have Virtualhosts for just the 443 port and still allow *.example.com to react

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-14 Thread Justin Pasher
Dan Schaefer wrote: So are you suggesting that I need multiple public IPs to implement this, or just multiple private IPs? Private IPs is not a problem, however, due to the fact that we have limited public IPS in our range, it could be a problem when if and when we add new SSL certs. We would

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-14 Thread Dan Schaefer
Justin Pasher wrote: Dan Schaefer wrote: So are you suggesting that I need multiple public IPs to implement this, or just multiple private IPs? Private IPs is not a problem, however, due to the fact that we have limited public IPS in our range, it could be a problem when if and when we add

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-14 Thread Roger
Does it help to mention that my example.com and www.example.com certificates are the exact same cert? My apologies for not mentioning this in the beginning. If and when we do add SSL to other subdomains, they will be different certs. I don't see that happening in the near future, however.

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-14 Thread Dan Schaefer
Roger wrote: Does it help to mention that my example.com and www.example.com certificates are the exact same cert? My apologies for not mentioning this in the beginning. If and when we do add SSL to other subdomains, they will be different certs. I don't see that happening in the near future,

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-14 Thread Peter Schober
* Roger rno...@gmail.com [2009-12-14 17:26]: Is the content under example.com and www.example.com the same? If it is, then just redirect all requests to example.com, www.example.com to one location. You don't need two certificates. In my opinion, if it is the same content then having

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-14 Thread Dan Schaefer
Peter Schober wrote: * Roger rno...@gmail.com [2009-12-14 17:26]: Is the content under example.com and www.example.com the same? If it is, then just redirect all requests to example.com, www.example.com to one location. You don't need two certificates. In my opinion, if it is the same

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-14 Thread Roger
If both vhosts are accessed via https you'll need both covered, as the ssl connection happens before the redirect (as has been pointed out dozens of times in recent weeks), -peter The situation that I was talking about is that if someone access http://example.com or http://www.example.com

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-14 Thread Peter Schober
* Roger rno...@gmail.com [2009-12-14 17:47]: The situation that I was talking about is that if someone access http://example.com or http://www.example.com then redirect to either https://www.example.com OR https://example.com. Sure. But of course, you cannot stop someone for trying to access

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-14 Thread Roger
http://markmail.org/message/yr52ptnpgbocgvad But we should just push for SNI, I guess. -peter Yea I agree. -r - The official User-To-User support forum of the Apache HTTP Server Project. See

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-14 Thread Justin Pasher
Dan Schaefer wrote: Does it help to mention that my example.com and www.example.com certificates are the exact same cert? My apologies for not mentioning this in the beginning. If and when we do add SSL to other subdomains, they will be different certs. I *don't* see that happening in the near

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-13 Thread Toomas Aas
Dan Schaefer wrote: My company is wanting to keep this configuration for port 80 and add an SSL certificate for just the www.example.com and example.com hostnames. Is it possible to have Virtualhosts for just the 443 port and still allow *.example.com to react the same way it does now?