Same sort of problem when trying to run multiple SSL on a host header
in IIS.

John

On Wed, 7 Jan 2004 09:54:40 -0800, Dylan Bromby wrote:
> OK here's the material I found on this subject:
>
> ".you cannot use name-based virtual hosting in conjunction with an
> SSL site.
> The negotiation of the connection encryption takes place before the
> client
> has a chance to tell the server which named host it wanted to
> connect to.
> Consequently, by the time it gets to that stage, it might have
> already
> negotiated a secure connection to the wrong site. So, if you want
> to put up
> a secure site using SSL, you have to have a unique IP address for
> each
> SSL-enabled virtual host."
>
> So I should've clarified that was the caveat leading to my post. I
> don't
> know if you were originally trying to do this IP-less or not. I'll
> read the
> initial post in detail now. We run numerous SSL sites using Apache
> 2.0.48/CFMX6.1/Win2K3 so hopefully I can help you out here.
>
> Dylan
>
>  _____  
>
> From: Dylan Bromby [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, January 07, 2004 8:30 AM
> To: CF-Server
> Subject: RE: virtual host (or ssl) problem with cfm pages
>
> I'm looking for the reference, but I don't think you can run SSL
> using
> virtual hosts on Apache. I think each https host has to have an IP.
> We run
> CFMX 6.1 and Apache 2.0.48 on Win2K but have run CF w/ Apache 2.0.x
> on Win32
> for some time. I know I've looked into this and I know I read each
> https
> site has to be bound to an IP.but let me try and dig up the actual
> reference.
>
> Dylan
>
>  _____  
>
> From: Dave Watts [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, January 06, 2004 1:31 PM
> To: CF-Server
> Subject: RE: virtual host (or ssl) problem with cfm pages
>
>> We've added a virtual host to handle https requests. The virt
>> host serves html pages correctly (with padlock), but throws a
>> 500 error for cfm requests (whether or not there is simple cf
>> code on the page).
>
> I'm just guessing as I haven't had to configure CFMX on Apache with
> SSL yet,
> but I suspect you'll have to change this:
>
>    JRunConfig Ssl false
>
> to this:
>
>    JRunConfig Ssl true
>
> You may need to define your JRun settings within each virtual host,
> also.
>
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
> voice: (202) 797-5496
> fax: (202) 797-5444
>
>  _____
>
>  _____
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to