-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Virtual hosts and SSL don't mix. Or so people say, for the simple reason
that in order to reach the HTTP negotiation an SSL connection must be
established first with a certificate/key pair.

If you give it a try, Apache fills its log with the "SSL server IP/port
conflict" and "You should not use name-based virtual hosts in
conjunction with SSL" warnings. But since the adoption of wildcard SSL
certificates virtual hosts over SSL work just fine because the same
certificate/key pair is used for all of them.

So the part I'm leading up to is: how about a way to turn off these
warnings? Or perhaps a simple certificate analysis to see if the
wildcard matches all the virtual hosts for which it serves?

If that solution makes sense, and no existing developers are onto it, I
could put together a patch. But if it's a bad idea (for whatever reason)
then save me the effort. :)

- --
Jay L. T. Cornwall, http://www.esuna.co.uk/~jay/
PhD Student
Imperial College London
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGGSr5oHnC75cy2zgRAjHMAJ9RDojI47cZukQIYvVLBTN0nKgg5QCfY92r
PxuThSFTEC7AUqMFQgHyRxU=
=NoY+
-----END PGP SIGNATURE-----

Reply via email to