Just use the same cert on every machine. The certificate just needs to
match the www.domain.com not the host name. Just be sure to edit the
hostname in you httpd.conf file and set it the same on every host. I do
this all the time with a verisign certificate behind load balancers from
http://www.f5.com.
John Hamlik
> -----Original Message-----
> From: Dave Paris [mailto:[EMAIL PROTECTED]]
> Sent: Monday, June 21, 1999 12:41 PM
> To: [EMAIL PROTECTED]
> Subject: certs and load balancing?
>
>
> Greets,
>
> I've been sifting through FAQs and archives, but I'm left with a
> lingering question.
>
> Given the following configuration:
>
>
> +-----------+
> | router |
> +-----------+
> |
> |
> +----------------------------------+
> | Load Balancer 'www.domain.com' |
> +----------------------------------+
> / | \
> / | \
> / | \
> / | \
> +-----------+ +-----------+ +-----------+
> | xxx.100 | | xxx.101 | | xxx.102 |
> +-----------+ +-----------+ +-----------+
>
> In the example, the Load Balancer is something akin to a Cisco
> LocalDirector or a Nortel Accelar 750. Where the host of 'www' is
> actually the load balancer which forwards requests between
> xxx.xxx.xxx.100, .101, and .102.
>
> The question posed is how does one handle certificates on
> each of .100,
> .101, and .102 such that https://www.domain.com can be
> handled by any
> of the three machines?
>
> Obviously, the machines can't all be named the same and still resolve
> (ie, naming each of them 'www' with a different IP would result in DNS
> round-robining .. which isn't desirable)
>
> Can anyone shed a little light on this one while I still have my hair
> left? (explanations, URLs, FAQ pointing all welcomed with open
> sockets..)
>
> mille grazie in advance..
> -dsp
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
>
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
