LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 10-06-2009, 04:07 PM   #1
millergroup
Member
 
Registered: Oct 2009
Posts: 39

Rep: Reputation: 15
SSl in ssl.conf


I have a webserver setup for myself with two domains. Both need ssl.
I am running fedora 10 Apache/mod_ssl.

I am trying to configure ssl.conf to reconize two different ip addresses, one for each domain.

Each has their own Vhost containers (NamedVirtualHHost)

<VirtualHost 192.xxx xxx x01 :443>
blabla
blabla
</VirtualHost>


<VirtualHost 192.xxx xxx x02 :443>
blabla
blabla
</VirtualHost>

I call https... first site works ok

I call https....second site it calls the first ssl cert (bad cert)

Apache does not separate the two.

My question, how do I get apache to deliver https..domain_one and domain_two correctly?

Thank you in advance.
 
Old 10-07-2009, 12:31 AM   #2
Doculus
LQ Newbie
 
Registered: Oct 2009
Distribution: Gentoo
Posts: 29

Rep: Reputation: 17
Sorry, there is no way, afaik, on 1 ip address at least.
The root of problem is that SSL protocol binds to the ip addresss in the negotiation phase.
 
Old 10-07-2009, 02:38 AM   #3
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
@OP
Could you replace blablas with the actual directives you use in both vhosts? Are you sure you're using different server names and different certs for the 2 vhosts?

@Doculus
Quote:
Sorry, there is no way, afaik, on 1 ip address at least.
The root of problem is that SSL protocol binds to the ip addresss in the negotiation phase.
This is no longer true as you can use the SNI extension to have multiple ssl vhosts.
 
Old 10-10-2009, 09:14 PM   #4
millergroup
Member
 
Registered: Oct 2009
Posts: 39

Original Poster
Rep: Reputation: 15
{Resolved}

In order to get two separate SSL domains working both must have its own ip address.

So in httpd.conf the Listen directive must be listed in the config file for both (or more) ip addresses.

Example:
Listen 192.160.0.1:80
Listen 192.168.0.2:80

Then for your virtual host containers:

<NamedVirtualHost 192.168.0.1:80>

<VirtualHost 192.168.0.1>
blabla
blabla
</VirtualHost>

<NamedVirtualHost 192.168.0.2:80> (this was the trick to get it working)

<VirtualHost 192.168.0.2:80>
blabla
blabla
</VirtualHost>


This does not have to be done in your sss.conf file.
Your virtual host containers for ssl.conf is normal configuration, as httpd.conf is already doing what needs to be done separating the two different domains.

Last edited by millergroup; 10-10-2009 at 09:17 PM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
vsftpd SSL problem (522 SSL connection failed) stringZ Linux - Server 8 05-05-2009 02:27 PM
vsFTPd - SSL connection and dynamic SSL ports toxoplasme Linux - Server 11 08-22-2008 10:50 PM
creating an SSL page under non SSL site with apache1.33? taiwf Linux - Software 1 06-27-2006 01:06 AM
SSL Connections / second and SSL Accelerator Cards on Linux LinuxGeek Linux - Networking 0 06-10-2006 08:18 AM
httpd.conf & ssl.conf kevinm2 Linux - Security 12 08-31-2004 01:25 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 05:00 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration