----- Original Message -----
From: Marcel van Dorp <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, December 23, 2000 1:11 AM
Subject: [openca-users:161] Re: Apache config quirks
> On Mar 31, 4:33pm, Asfira Sagitri wrote:
> > Subject: [openca-users:160] Re: Apache config quirks
> >
> > Hi...
> >
> > On Thu, 21 Dec 2000, Marcel van Dorp wrote:
> >
> > > include /etc/apache-ssl/vhosts/caserver
> > > #include /etc/apache-ssl/vhosts/raserver
> > > #include /etc/apache-ssl/vhosts/secureserver
> > >
> > What's the content of raserver & secureserver files ?
>
> > If you're using the same server for the RA Server and Secure Server, then
> > you must be using another port for the https (other than 80 and 443).
>
> Why? If I use 'normal' virtualhosts (ie. non-ssl), Then I can use different
> servers on the same port, but with different names. HTTP1.1 allows this: the
> server recognises the complete URL (including hostname), and can differentiate
> between them.
Somebody have explained it in old mails, you can search it.
In a word, apache SSL does not support several certs in one IP and Port,
it will use the first SSLCertificateFile and SSLCertificateKeyFile config.
> > If you're doing it that way, then don't forget to specify the port numbers
> > on the ServerName directives..
> > For example, if you're using port 4443 for the raserver :
> >
> > > <VirtualHost 111.222.333.444:4443>
> > > ServerAdmin [EMAIL PROTECTED]
> > > DocumentRoot /var/www-secure/httpdocs-raserver
> > > ServerName ca.mydomain.nl:4443
> > ^^^^^^^^^^^^^^^^^^^^
> >
> > Hope this can solve your problem
> >
> > Regards,
> > -Fira-
> Well, It's one way to solve it :*) I was thinking of splitting it up over
> several distinguished servers. That will also do the trick, but is a lot more
> of work.
>
> Thanks for your input!
>
> Regards,
>
> MArcel
>
> --
> ---------------------------------------------------------------
> ing. Marcel van Dorp (CCDP, CCNP+security) http://www.wiwo.nl
> WiWo Support tel. 071-523 77 91
> Postbus 1098 fax 071-523 77 94
> 2340 BB Oegstgeest gsm 0653-50 77 76
> ---------------------------------------------------------------
>
> _________________________________________________________________
> OpenCA - Users Support Mailing List [EMAIL PROTECTED]
>
_________________________________________________________________
OpenCA - Users Support Mailing List [EMAIL PROTECTED]
