Thanks, that worked!

Brett,

In the scenario you implemented with "Tomcat and JSPs and servlets and
all..."
do you actually support different virtual hosts with specific directories 
that are secure using the "redirects from non-secure area to secure
area"...?

How would you handle different certificates for the different virtual
domains?  Is that do-able too?

Thanks for the insight!
-Arthur.


-----Original Message-----
From: Brett W. McCoy [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 09, 2001 8:57 AM
To: '[EMAIL PROTECTED]'
Subject: RE: SSLRequireSSL


On Fri, 9 Mar 2001, Chong, Arthur wrote:

> Pardon my *stupidity* but when you say _default_:443
> you really mean whatever the IP addresss is or
> virtual domain name lime "www.mydomain.com" - right?
>
> <VirtualHost _default_:443>
>   ...
>   <Directory /home/www/secure>
>     SSLRequireSSL
>     ...
>   </Directory>
> </VirtualHost>

That's how you actually specify it in your httpd.conf.  The _default_ line
is kind of like a macro that gets filled in with whatever is entered under
the ServerName directive.

-- Brett
                                http://www.chapelperilous.net/~bmccoy/
------------------------------------------------------------------------
Never argue with a woman when she's tired -- or rested.

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to