You might want to investigate using a wildcard cert, then name-based virtual 
hosting can work with SSL. This requires that your hosts all be from the same 
domain ( x.foo.com, y.foo.com etc. )

Similarly, mod_gnutls ( http://www.outoforder.cc/projects/apache/mod_gnutls ) 
permits Name-based virtual hosts with SSL using Server Name Indication (SNI). I 
don't know that I'd want to run it on a production site yet and SNI isn't 
supported on all browsers.

Matt


----- Original Message -----
From: "Joshua Slive" <[EMAIL PROTECTED]>
To: users@httpd.apache.org
Sent: Sunday, March 30, 2008 9:39:39 AM GMT -06:00 US/Canada Central
Subject: Re: [EMAIL PROTECTED] Name-based virtual hosting with SSL

On Sun, Mar 30, 2008 at 3:36 AM, Vinay Purohit <[EMAIL PROTECTED]> wrote:
>
>  Hi,
>
>  Why Name-based virtual hosting cannot be used with SSL secure servers ?

Because in order to choose the correct certificate to negotiate the
secure connection, the server must know what name to use. But the name
in the request is only available after the secure connection has been
negotiated.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to