[Sks-devel] Question: serving two different SSL certificates under Apache?

2014-06-01 Thread John Zaitseff
Hi, I am setting up https://keyserver.zap.org.au/ to be used by hkps.pool.sks-keyservers.net. I am trying to serve different SSL certificates depending on the incoming hostname. Does anyone know if this is possible within the SAME VirtualHost configuration block under Apache? My current

Re: [Sks-devel] Question: serving two different SSL certificates under Apache?

2014-06-01 Thread Martin Papik
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 This link might help. https://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI However this relies on an extension to TLS calles SNI (server name indication), which sadly isn't implemented in all clients, some less popular or older browsers for

Re: [Sks-devel] Question: serving two different SSL certificates under Apache?

2014-06-01 Thread John Zaitseff
Hi, This link might help. https://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI Thanks, Martin. However, I've already read that, and it doesn't answer my specific question. To clarify: I want to serve my own ZAP Group certificate when HTTPS queries come to keyserver.zap.org.au, and the

Re: [Sks-devel] Question: serving two different SSL certificates under Apache?

2014-06-01 Thread Martin Papik
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 AFAIK you need two. I'm sorry, I missed the point, you have a special case (as far as apache is concerned), one virtual host, but two certificates need to be presented on demand. So, AFAIK/IMHO you need to have two virtual hosts just for the

Re: [Sks-devel] Question: serving two different SSL certificates under Apache?

2014-06-01 Thread John Zaitseff
Hi, Phil et al., To clarify: I want to serve my own ZAP Group certificate when HTTPS queries come to keyserver.zap.org.au, and the sks-keyservers.net certificate when queries come to *.sks-keyservers.net. Can I do this with ONE VirtualHost block in Apache, or must I use two? I can't