Martin,
You will need separate IP addresses for each SSL host, it's not
Apache/ModSSL specfic.
Mikey.
Check the FAQ
http://www.modssl.org/docs/2.6/ssl_faq.html#ToC46
The reason is very technical. Actually it's some sort of a chicken and egg
problem: The SSL
protocol layer stays below the HTTP protocol layer and encapsulates HTTP. When
an SSL
connection (HTTPS) is established Apache/mod_ssl has to negotiate the SSL
protocol
parameters with the client. For this mod_ssl has to consult the configuration of
the virtual server
(for instance it has to look for the cipher suite, the server certificate,
etc.). But in order to
dispatch to the correct virtual server Apache has to know the Host HTTP header
field. For this
the HTTP request header has to be read. This cannot be done before the SSL
handshake is
finished. But the information is already needed at the SSL handshake phase.
Bingo!
Martin Helie <[EMAIL PROTECTED]> on 03/16/2000 01:57:28 PM
Please respond to [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
cc: (bcc: Mike Innes/Virgin Direct/GB)
Subject: Name based virtual hosts
Hello,
I seem to have read something about apache and modssl not being too friendly
towards name based virtual hosts, but was wondering if anyone had more
info...
So far, I have been able to allow _one_ virtual host to access port 443, but
if I enable SSL for any other vhosts, things get kind of weird.
Are my only options to get IP addresses for each host, or run multiple
instances of httpd configured differently? Any other ideas?
Thanks,
Martin
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
********************************************************************************
Internet communications are not secure. This message is confidential to the intended
addressee. Any copying or distribution of it by anyone without the addressee's consent
may be unlawful. If you are not the intended addressee, please inform us immediately
and then delete this message.
Virgin Direct Personal Financial Service Ltd is regulated by the Personal Investment
Authority for life insurance, pension and unit trust business and represents only the
Virgin Direct marketing group. Registered office: Discovery House, Whiting Road,
Norwich NR4 6EJ, UK. Registered in England No. 3072766.
The Virgin One account is a secured personal bank account with The Royal Bank of
Scotland plc. It is provided by Virgin Direct Personal Finance Ltd which is a
representative only of Virgin Direct Personal Financial Service Ltd. Registered
office: Waterhouse Square, 138-142 Holborn, London EC1N 2TH, UK. Registered in England
no 3414708.
The Virgin Deposit Account is a personal deposit account with The Royal Bank of
Scotland plc administered by Virgin Direct Personal Financial Service Ltd.
********************************************************************************
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
