Full_Name: Doug Taylor
Version: 2.6.4-1.3.12
OS: Linux
Submission from: (NULL) (205.179.173.195)


I am having problems setting up multiple SSL virtual hosts with their own
certificates.  Httpd.conf virtual host section looks something like the
following (unimportant information, such as log paths, omitted... IP addresses
and names made generic):

<VirtualHost 123.45.67.89>
DocumentRoot "/usr/local/apache/htdocs/vhost1/"
ServerName vhost1.mydomain.com
SSLEngine on
SSLCertificateFile /usr/local/apache/conf/ssl.crt/vhost1.mydomain.com.crt
SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/vhost1.mydomain.com.key
<Location />
SSLRequireSSL
</Location>
</VirtualHost>

<VirtualHost 123.45.67.89>
DocumentRoot "/usr/local/apache/htdocs/vhost2/"
ServerName vhost2.mydomain.com
SSLEngine on
SSLCertificateFile /usr/local/apache/conf/ssl.crt/vhost2.mydomain.com.crt
SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/vhost2.mydomain.com.key
<Location />
SSLRequireSSL
</Location>
</VirtualHost>


It _IS_ possible to have multiple certificates on a given IP, right?  All that I
have read in FAQs and other bug reports is that you can't use name-based virtual
hosts, but that IP-based should work.  But nothing I have read says that I need
different IPs or ports or anything like that.  Do I?

If so, does this imply that it is somehow possible to assign multiple IPs to a
single NIC on my server?  And if I want to host 5-10 SSL sites on my server, I'm
going to need 5-10 separate IPs???   IPs are scarce man, I don't have that many
available!  I hope that's not my only solution...

Thanks in advance for any assistance or direction,
Doug

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to