LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 10-23-2007, 03:55 PM   #1
svancouw
LQ Newbie
 
Registered: Oct 2006
Location: California
Distribution: Debian Etch
Posts: 9

Rep: Reputation: 0
Failover with webserver with private SSL certs


I have two servers that I've set up, and I've been researching a way to set up automatic failover/clustering. This does not seem difficult to do, with one exception.

SSL certs. An SSL cert is bound to one IP only. How do I set up clustering so that I can host my sites with SSL certs? Do I just buy two certs and keep a slightly different version of my site on each server in case of failure? I plan on using rsync to keep the majority of the pages and databases current between systems.

I'm looking at using the Hercules Load Balancer Virtual Appliance (based on pen) posted on vmware's site (http://www.vmware.com/appliances/directory/300).

Is there another method that is out there that I'm not seeing that doesn't cost an arm and a leg?

Thanks for the help!
 
Old 10-23-2007, 04:17 PM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
It is not bound to one ip at all. That relationship is one https server can only reference one certificate. you can put that certificate on as many boxes as you feel like, but all of those boxes can only serve the same website over https.
 
Old 10-23-2007, 05:00 PM   #3
svancouw
LQ Newbie
 
Registered: Oct 2006
Location: California
Distribution: Debian Etch
Posts: 9

Original Poster
Rep: Reputation: 0
Perhaps I was getting that confused with the fact that you can only have one SSL cert per IP without problems. This has to do with the fact that port 443 will serv up the first available website for that IP, correct? SSL certs cannot properly handle vhost name-based configurations.

Turns out that you *can* buy a cert to be permanently bound to only one IP, but it's not required. I didn't find that info in my last few searches.

I've got about 8 IPs to play with on each server.

Thank you for pointing me in the right direction. This certainly simplifies matters.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Webserver Failover using RH5 Jimerson Red Hat 3 08-14-2007 12:57 PM
The Big Name consipracy - and SSL certs jantman General 15 02-15-2007 02:43 PM
webserver failover imi@tux Linux - Networking 1 05-23-2006 02:47 AM
multiple ssl certs, single apache server? hank43 Linux - Software 0 01-26-2005 04:56 PM
install 2 or more SSL certs on same machine with 1 IP lsimon4180 Linux - Software 0 10-22-2004 01:19 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 01:09 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration