LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices


Reply
  Search this Thread
Old 03-05-2002, 11:19 AM   #1
dkochan
LQ Newbie
 
Registered: Jul 2001
Posts: 19

Rep: Reputation: 0
Multiple SSL Certificates Per IP Address


Does Linux support the ability to use multiple SSL certificates per IP address? For example, I want use one IP adress to host two different e-commerce sites that have different domain names and use different SSL certificates. Under Windows 2000 I have to use two different IP addresses to this.
 
Old 03-05-2002, 01:06 PM   #2
kill-hup
Member
 
Registered: Aug 2000
Location: NY - USA
Distribution: Slackware
Posts: 109

Rep: Reputation: 15
Unfortunately, no, but it's not really a Linux limitation but an SSL/TLS one.

You see, the certificate transaction happens before the client has the opportunity to tell the server the hostname of the web site it is trying to reach. Virtual hosts work because the client sends a "Host:" header indicating which hostname it wants, thus multiple hostnames may be served by the same IP. Because of the certificate validation occurring before the client sends the "Host:" header, NameVirualHosts cannot have individual certificates. I may be wrong, but I believe Apache will use the certificate of the virtual host defined first in the configuration file for any SSL requests on that IP.

You can still run SSL on the other sites, but the name of the certificate presented will not match the "server name". This will most always cause a browser warning to the client.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
SSL certificates the-chains Linux - Software 0 11-15-2004 07:12 PM
Trouble generating ssl certificates linuxturtle Linux - Networking 3 09-19-2004 08:23 AM
ssl certificates champ Linux - Security 2 04-05-2003 09:47 AM
ssl certificates Syncrm Linux - General 7 02-26-2003 10:01 AM
SSL Certificates and root authorities antken General 2 01-24-2003 10:55 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 08:37 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration