On Wed, 11 Jul 2001, Cliff Woolley wrote:

> Apache 1.3 does not ship with SSL support, which is why you won't find
> documentation about it.  If you're using mod_ssl by Ralf Engelschall,
> there is an exceedingly good documentation set about it at
> http://www.modssl.org/.  I'm not too familiar with Apache-SSL by Ben
> Laurie, but you can find a (seemingly more terse) set of documentation for
> that at http://www.apache-ssl.org/.
>
> The problem you're having is that HTTP name-based virtual hosting and SSL
> are mutually exclusive.  That's because the HTTP Host: header doesn't get
> sent until after the SSL session is already established, and therefore
> Apache does not and cannot know which one of the virtual hosts you're
> trying to connect to and therefore cannot pick the right <VirtualHost>
> section from your config and the certificate that goes with it.
>
> This is a frequently asked question on the mod_ssl users mailing list and
> is probably one on the Apache-SSL lists as well.  There is an FAQ at
> www.modssl.org which includes a description of this "chicken and the egg"
> problem.  I'd give you the URL but I can't get to modssl.org at the
> moment.
>
> --Cliff
>
>

     I'm (re)reading the mod_ssl pages.  It may be here but I haven't
found it.

     Please pardon my logic quibble but they can't be mutually
exclusive since I have gotten to work.  It just took a while to figure
out which magic incantation to use where.  I'll suggest to the
mod_ssl'ers that something about this be included in their FAQ as
well as well.  I just thought, gee wiz, since I was trying to
configure Apache that this might be the place to put it.

     Thank you.

-- 
-------------------------------------------------------------------------------
Chris Johnson               |Internet: [EMAIL PROTECTED]
Systems Administrator       |Web:      http://www.nmr.mgh.harvard.edu/~johnson
NMR Center                  |Voice:    617.724.2369
Mass. General Hospital      |FAX:      617.726.7422
149 (2301) 13th Street      |Life is chaos.  Chaos is life.
Charlestown, MA., 02129 USA |    Trance Gemini
-------------------------------------------------------------------------------


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to