[plug] Debugging apache-ssl virtualhost certificates

Bernard Blackham bernard at blackham.com.au
Fri Dec 31 18:29:22 WST 2004


On Fri, Dec 31, 2004 at 06:21:17PM +0800, bob wrote:
> I need some help please. I am trying to get apache-ssl to spit out different 
> ssl certs on a per virtualhost basis. I have the following ditties in the 
> config (which are  in agreement with the docs)

Not possible with named Virtual Hosts (one IP, many sites). The SSL
session is initiated before the Host: header (determining which
VirtualHost to use) is sent. Hence only a single SSL certificate can
be used with named Virtual Hosts.

You should be able to set up multiple SSL certs if doing IP-based
virtual hosts. (Depending which IP is connected to, a different
certificate is presented).

The only exception to this is if you have a wildcard cert and all
your virtual hosts are in the same domain covered by the cert - then
name-based hosts are fine because the same cert would be presented
anyway.

Bernard.

-- 
 Bernard Blackham <bernard at blackham dot com dot au>



More information about the plug mailing list