So my only option is to get a new IP address assigned for each?

Thanks for the quick reply.

-----Original Message-----
From: Krist van Besien [mailto:[EMAIL PROTECTED] 
Sent: Monday, September 19, 2005 11:39 PM
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] Virt Host not Working under SSL

On 9/20/05, Jason Beebe <[EMAIL PROTECTED]> wrote:

> So what is so baffling to me is when accessing the domain via https:// it
> does pull up the proper website, but Apache looks like it is defaulting to
> the key/crt pair of the first entry.

>From the Apache SSL FAQ:

"Why is it not possible to use Name-Based Virtual Hosting to identify
different SSL virtual hosts?

Name-Based Virtual Hosting is a very popular method of identifying
different virtual hosts. It allows you to use the same IP address and
the same port number for many different sites. When people move on to
SSL, it seems natural to assume that the same method can be used to
have lots of different SSL virtual hosts on the same server.

It comes as rather a shock to learn that it is impossible.

The reason is that the SSL protocol is a separate layer which
encapsulates the HTTP protocol. So the problem is that the SSL session
is a separate transaction that takes place before the HTTP session
even starts. Therefore all the server receives is an SSL request on IP
address X and port Y (usually 443). Since the SSL request does not
contain any Host: field, the server has no way to decide which SSL
virtual host to use. Usually, it will just use the first one it finds
that matches the port and IP address."

Krist

-- 
[EMAIL PROTECTED]
Solothurn, Switzerland

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to