LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices



Reply
 
Search this Thread
Old 08-19-2009, 04:52 PM   #1
Risca
LQ Newbie
 
Registered: Aug 2009
Posts: 2

Rep: Reputation: 0
APACHE and SSL using Virual IP's


How do I get a private IP to map to a public website I'm hosting so I can have separate SSL certificates.

I have a single public IP that I wish to run multiple vhosts on.
We have the URL's mapped to the public IP and if I just do simple
vhosts I can get the separate pages to load fine.

The problem is I want to use IP's and those IP's need to be private virtual IPs and I want SSL to work.

I've created a couple private virtual IP's that are pingable like 192.168.0.1 & 2

But I can't figure out how they are mapped together.

Thanks
 
Old 08-19-2009, 04:57 PM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,415

Rep: Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968
You can't, as you can't distinguish between the site being requested by an http client before the connection is established. You would conventionally either terminate the ssl generically at a seperate point infront of the vhosts, e.g. load balancer / ssl offload engine and use a single certificate with multiple hostnames on it.
 
Old 08-19-2009, 05:37 PM   #3
Risca
LQ Newbie
 
Registered: Aug 2009
Posts: 2

Original Poster
Rep: Reputation: 0
I would tend to believe you but its being done. I just don't understand how.

On a site with 1 sever.

We have a bunch of separate SSL certificates and the sites are separated by private 192.168.1.XXX addresses but are accessed via public addresses but I don't understand how it works.

a few edited lines from /usr/sbin/httpd -S
192.168.1.52:80 is a NameVirtualHost
default server default ()
port 80 namevhost default ()
port 80 namevhost webmail ()
port 80 namevhost lists ()
port 80 namevhost SITE1_NAME1.COM ()
port 80 namevhost SITE1_NAME2.COM ()
192.168.1.52:443 is a NameVirtualHost
default server default-192-168-1-52 ()
port 443 namevhost default-192-168-1-52 ()
port 443 namevhost webmail ()
port 443 namevhost lists ()
port 443 namevhost SITE1_NAME1.COM ()

And this somehow works, but I haven't figured out how.
In /var/local/psa/var/certificates we have 27 separate certificates that show up on different site directives for SSLCertificateFile ...

So I'm not sure where this leaves me.
Does it help if I say that site is managed using plesk.

Thanks
 
Old 08-20-2009, 01:05 AM   #4
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,415

Rep: Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968
Well that appears to read that you're doing what's given here as an impossible design:

http://wiki.apache.org/httpd/CommonM...a007f3b6526a0e
http://httpd.apache.org/docs/2.2/ssl...q.html#vhosts2

Not sure quite where to go as my knowledge says this is impossible, at least within the scope of Apache, and general logic of the high degree of seperation betwen HTTP and the S part.

I'd be interested in seeing something like a traffic capture of the SSL handshakes taking place, and seeing what certificate comes back from what IP address.
 
  


Reply

Tags
apache22


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Apache Only allow certain IP's and redirect others chenxiaolong Linux - Server 2 08-15-2009 12:12 AM
SSL Servers vs Apache SSL mlewis Linux - Networking 2 04-02-2008 11:13 AM
apache 2 virual hosts alaios Linux - Networking 4 06-03-2004 07:48 PM
apache 2 virual hosts alaios Linux - Software 6 05-18-2004 02:05 PM
Apache and Dynamic IP's ranixlb Linux - Networking 3 05-24-2002 02:15 PM


All times are GMT -5. The time now is 04:56 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration