From: "MATHIHALLI,MADHUSUDAN (HP-Cupertino,ex1)" <[EMAIL PROTECTED]>
Sent: Monday, July 30, 2001 5:27 PM


> > Worse yet, if I have a combined cert+key RSA file and I'm using old, seperate
> > DSA cert and key files, the RSA (listed first) works (or maybe not) but it's
> > passed the DSA's key, and the DSA is missing it's key entirely.
> 
> I'm not sure what you're trying to do here - if you are trying ip-based vhost stuff, 
> I belive you can have only one certificate per ip / vhost. If you don't mind, could 
>you
> pl. explain more..

You can use one certificate _of each type_, e.g. rsa, dsa, varying bit sizes, etc.

> > The only solution I can figure is to allow two args to the SSLCertificateFile
> > directive, the certificate, followed by [an optional] key.  This will allow
> > us to explain WFT just happened to this poor user.
> 
> It's a pretty good idea - I'm not sure why the ceritificate and the key parameters
> were split into 2 parameters.. 

I'll take that as a +1 (from a non-committer) and am fishing for anyone else's 
opinions,
or votes.

Bill

Reply via email to