From owner-freebsd-security Fri Nov 22 4:51:19 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 34F4937B401 for ; Fri, 22 Nov 2002 04:51:17 -0800 (PST) Received: from webmail.sub.ru (webmail.sub.ru [213.247.139.22]) by mx1.FreeBSD.org (Postfix) with SMTP id 00C6343EAA for ; Fri, 22 Nov 2002 04:51:16 -0800 (PST) (envelope-from tarkhil@webmail.sub.ru) Received: (qmail 93809 invoked by uid 0); 22 Nov 2002 12:51:55 -0000 Received: from unknown (HELO shuttle.svib.ru) (195.54.219.242) by webmail.sub.ru with SMTP; 22 Nov 2002 12:51:55 -0000 Date: Fri, 22 Nov 2002 15:50:27 +0300 From: Alex Povolotsky To: "Allan Jude" <937863@primus.ca>, freebsd-security@FreeBSD.ORG, quak@mydiax.ch, Danny.Carroll@mail.ing.nl Subject: Re: jailed virtual https, anyone? Message-Id: <20021122155027.7f694357.tarkhil@webmail.sub.ru> In-Reply-To: References: <20021122145947.406b4d31.tarkhil@webmail.sub.ru> Organization: sub.ru X-Mailer: Sylpheed version 0.8.2claws (GTK+ 1.2.10; i386-portbld-freebsd4.4) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Fri, 22 Nov 2002 07:07:41 -0500 "Allan Jude" <937863@primus.ca> wrote: AJ> What seems to be the problem with the virtual hosts? AJ> You're quite right, but I have EVERYTHING works ok for now, EXCEPT AJ> virtual hosts with https. Google shows nothing relevant on "jail https AJ> virtual". Oh, quite simple. https cannot be configured with name-based virtual hosts, by design. jail cannot be configured for more than one IP address, by design. (don't ask me to wait until jail-ng will be ready) Jail sits on internal IP, on lo0. fxp0 holds real IP addresses to be accessed from outside. I'm forwarding incoming connection to jail, currently with ipnat. I need to pass information about real (outside) IP to mod_ssl. That is my problem. plain http works perfectly (name-based virthosts). I'm using mod_ssl, but not restricted to it. -- Alex. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message