Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 12 Feb 2004 11:19:33 -0600
From:      "Nicolas de Bari Embriz G. R." <nbari@unixmexico.com>
To:        Juan Jose Sanchez Mesa <juanjo.listas@dobleJ.net>
Cc:        freebsd-isp@freebsd.org
Subject:   Re: Multiple SSL Domains on one IP ...
Message-ID:  <1076606373.1625.2.camel@p4.unixmexico.net>
In-Reply-To: <2004212181157.302775@juanjo>
References:  <2004212181157.302775@juanjo>

next in thread | previous in thread | raw e-mail | index | archive | help
A solution could be to use a different PORT per virtualhost

domain1:4430
domaim2:4431
domain3:4432

....


On Thu, 2004-02-12 at 11:11, Juan Jose Sanchez Mesa wrote:
> (sorry for my bad english)
> 
> > a) is this possible at all?  last I checked, I swear that you couldn't
> > have multi-SSL certs loaded up per IP, but not sure if that is a limit in
> > the certs themselves, or Apache?
> 
> Is not possible, because the SSL negotiation is done before any header is sent from browser to Apache. Apache can't know what virtual server is the browser accesing to use the correct cert. Then, the selection is done using the IP in which the browser is connecting.
> 
> You must have one SSL cert per IP.
> 
> >
> > b) does anyone out there offer a wildcard cert that would allow this?
> > from what I'm finding, they allow *.<domain>, but not just * ... or maybe
> > some way of sign'ng the cert for the specific IP?
> 
> Wildcard certs are valid to subdomains only, not for domains.
> 
> Best regards.
> 
> _______________________________________________
> freebsd-isp@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
> 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1076606373.1625.2.camel>