SSL & NameBased VirtualHost ??

RHrulz · 12-12-2004, 04:24 PM

Does anyone know if this is actually possible?

I am running Mandrake 10.1 as a mail server, got qmail running and everything works fine. I am running Apache 2.0. I want to get my Squirrelmail login secure. I figured I could use SSL and put some setting in the conf files. I have had no luck.

then I see this:

From Redhat.com:

You can not use name based virtual hosts with SSL, because the SSL handshake (when the browser accepts the secure Web server's certificate) occurs before the HTTP request which identifies the appropriate name based virtual host. If you want to use name-based virtual hosts, they will only work with your non-secure Web server.

From Apache.org:

Name-based virtual hosting cannot be used with SSL secure servers because of the nature of the SSL protocol.

But then it goes on to say:

If you're planning to use multiple ports (e.g. running SSL) you should add a Port to the argument, such as *:80.

Anyone have SSL working for NameBased Virtual host?

Butt-Ugly · 12-12-2004, 05:33 PM

If you have SSL running, you can force all your webmail to https before they login, this ensures your users are protected. It also stops them from adjusting URL to http.

Code:

<VirtualHost *:80>
    DocumentRoot /var/www/html
    ServerName www.example.com:80
    ServerAdmin admin@example.com
    RewriteEngine On
    RewriteCond %{SERVER_PORT} ^80$
    RewriteRule ^/webmail/(.*) https://%{SERVER_NAME}/webmail/$1 [R,L]
    RewriteLog /var/log/httpd/rewrite_engine_log
    RewriteLogLevel 3
</VirtualHost>

For those that want to create their own SSL certificates (2 yr life)

Code:

openssl req -new -out new.cert.csr
openssl rsa -in privkey.pem -out new.cert.key
openssl x509 -in new.cert.csr -out new.cert.cert -req -signkey new.cert.key -days 730


cp new.cert.key /etc/httpd/conf/ssl.key/server.key
cp new.cert.cert /etc/httpd/conf/ssl.crt/server.crt

Remember to keep your private keys save...

Hope this helps.

Miles