RE: VHOST PROBLEM

Simon_Wilcox Thu, 07 Sep 2000 01:08:38 -0700

AFAIK there is no way to do this. Both host names resolve to the same IP address
so at the point the SSL connection is established, the server has no way of
determining which server name was requested so the connection is made.

      I imagine that you could write a handler in mod_perl or similar to examine
      the server name _AFTER_ the connection is made and display an appropriate
      response but there isn't any way to do it before a connection is made.

      HTH

      Simon Wilcox.







Please respond to [EMAIL PROTECTED]
             (Embedded image moved to file: pic16299.pcx) (Embedded image moved
to file: pic25030.pcx)
                                                                               
                                                                               
       From     Giuliano Cocchi                            Date   7 September  
                <[EMAIL PROTECTED]>             2000                
                                                                               

             (Embedded image moved to file: pic11365.pcx)   (Embedded image
moved to file: pic20457.pcx)
                                                                           
                                                                           
       To       [EMAIL PROTECTED], Adrian Stovall    Time 07:15      
                <[EMAIL PROTECTED]>,                                         
                "'[EMAIL PROTECTED]'"                                
                <[EMAIL PROTECTED]>                                  
                                                                           

             (Embedded image moved to file: pic22698.pcx)   (Embedded image
moved to file: pic11308.pcx)
                                                           
                                                           
       Copy to   (bcc: Simon Wilcox/BASE/WilliamsLea)      
                                                           

             (Embedded image moved to file: pic20807.pcx)

                            Fax to
             (Embedded image moved to file: pic02118.pcx)
                                                           
                                                           
       Subject  RE: VHOST PROBLEM                          
                                                           

             (Embedded image moved to file: pic08388.pcx)

                                                                        
                                                                        
                                                                        
       ......And there is a way to resolve this.......                  
       I want only realhost is reacheable via SSL on port 443.          
       The other vhost only via http on port 80, and when trying to     
       connect on port                                                  
       443, the browser should give me an error!!!                      
                                                                        
                                                                        
                                                                        
       On Wed, 06 Sep 2000, Adrian  Stovall wrote:                      
       > Hi, what you have here is an example of one of the problems    
       that vhosts and                                                  
       > SSL can cause.  when you type "https://www.aa.aa", you are     
       saying that you                                                  
       > want to connect to the server that www.aa.aa is associated     
       with on port 443,                                                
       > so you will end up with your default SSL page for that IP.     
       >                                                                
       > > -----Original Message-----                                   
       > > From: Giuliano Cocchi [mailto:[EMAIL PROTECTED]]  
       > > Sent: Wednesday, September 06, 2000 9:44 AM                  
       > > To: [EMAIL PROTECTED]                                  
       > > Subject: VHOST PROBLEM                                       
       > >                                                              
       > >                                                              
       > > Hi all.                                                      
       > > I have problem with my apache 1.3.12 + openssl 0.9.5a +      
       modssl 2.6.6                                                     
       > > I have apache configured with many vhost on http service     
       > > (port 80), and now i                                         
       > > want to configure SSL for only my realhost.                  
       > > Compilation and installation was ok.                         
       > > I have configured name base vhost (i know the problem with   
       name based                                                       
       > > vhost and SSL) without SSL, and the realhost with SSL:       
       > >                                                              
       > > Listen 192.168.1.2:80                                        
       > > Listen 192.168.1.2:443                                       
       > > NameVirtualHost 192.168.1.2                                  
       > >                                                              
       > > <VirtualHost www.aa.aa:80>                                   
       > > vhost1                                                       
       > > .....                                                        
       > > .....                                                        
       > > SSLEngine off                                                
       > > </VirtualHost>                                               
       > >                                                              
       > > <VirtualHost www.bb.bb:80>                                   
       > > vhost2                                                       
       > > .....                                                        
       > > .....                                                        
       > > SSLEngine off                                                
       > > </VirtualHost>                                               
       > >                                                              
       > > .....                                                        
       > > .....                                                        
       > >                                                              
       > > <VirtualHost 192.168.1.2:443>                                
       > > realhost                                                     
       > > .....                                                        
       > > .....                                                        
       > > SSLEngine on                                                 
       > > </VirtualHost>                                               
       > >                                                              
       > > All work correctly!!!                                        
       > > But if i write down into the browser https://www.aa.aa (this 
       > > vhost is without                                             
       > > ssl) it point directly to my realhost with ssl.              
       > > I need that writing https://www.aa.aa it return an error of  
       > > connection on port                                           
       > > 443.                                                         
       > > Any hint?                                                    
       > >                                                              
       ________________________________________________________________ 
       ______                                                           
       > > Apache Interface to OpenSSL (mod_ssl)                        
       www.modssl.org                                                   
       > > User Support Mailing List                                    
       [EMAIL PROTECTED]                                          
       > > Automated List Manager                                       
       [EMAIL PROTECTED]                                             
       > >                                                              
       >                                                                
       ________________________________________________________________ 
       ______                                                           
       > Apache Interface to OpenSSL (mod_ssl)                          
       www.modssl.org                                                   
       > User Support Mailing List                                      
       [EMAIL PROTECTED]                                          
       > Automated List Manager                                         
       [EMAIL PROTECTED]                                             
       ________________________________________________________________ 
       ______                                                           
       Apache Interface to OpenSSL (mod_ssl)                            
       www.modssl.org                                                   
       User Support Mailing List                                        
       [EMAIL PROTECTED]                                          
       Automated List Manager                                           
       [EMAIL PROTECTED]                                             
                                                                        














______________________________________________________________________


   This email contains proprietary information some or all of which may be
   legally privileged.  It is for the intended recipient only. If an addressing
   or transmission error has misdirected this email, please notify the author by
   replying to this email. If you are not the intended recipient you must not
   use, disclose, distribute, copy, print, or reply on this email.
pic16299.pcx
RE: VHOST PROBLEM

Reply via email to
