Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 12 Feb 2004 18:11:57 +0100
From:      Juan Jose Sanchez Mesa <juanjo.listas@dobleJ.net>
To:        "Marc G. Fournier" <scrappy@hub.org>, <freebsd-isp@freebsd.org>
Subject:   Re: Multiple SSL Domains on one IP ...
Message-ID:  <2004212181157.302775@juanjo>
In-Reply-To: <20040212125320.U40659@ganymede.hub.org>

next in thread | previous in thread | raw e-mail | index | archive | help
(sorry for my bad english)

> a) is this possible at all?  last I checked, I swear that you couldn't
> have multi-SSL certs loaded up per IP, but not sure if that is a limit in
> the certs themselves, or Apache?

Is not possible, because the SSL negotiation is done before any header is=
 sent from browser to Apache. Apache can't know what virtual server is the=
 browser accesing to use the correct cert. Then, the selection is done using=
 the IP in which the browser is connecting.

You must have one SSL cert per IP.

>
> b) does anyone out there offer a wildcard cert that would allow this?
> from what I'm finding, they allow *.<domain>, but not just * ... or maybe
> some way of sign'ng the cert for the specific IP?

Wildcard certs are valid to subdomains only, not for domains.

Best regards.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?2004212181157.302775>