LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   https virtual host (works only for one site) (https://www.linuxquestions.org/questions/linux-server-73/https-virtual-host-works-only-for-one-site-4175517447/)

kirthanshetty 09-05-2014 08:24 AM

https virtual host (works only for one site)
 
Hi,
I have created two HTTPS virtual host on my ubuntu server for example
https://sitea.example.com and https://siteb.example.com
If i click on https://sitea.example.com or https://siteb.example.com it shows content of https://siteb.example.com
but i have given both a different document root.

If i disable all https and enable single https virtual host, it works fine.
Can any one help me on this

TenTenths 09-05-2014 08:48 AM

Apache only knows how to use a single SSL certificate per IP address.

My guess is that you're trying to use multiple SSL certificates instead of a multi-domain cert.

kirthanshetty 09-06-2014 04:40 PM

https virtual host (works only for one site)
 
Hi,
If i run two https virtual host i'm getting below warning

* Restarting web server apache2 apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1 for ServerName
[Sun Sep 07 03:04:40 2014] [warn] _default_ VirtualHost overlap on port 443, the first has precedence
... waiting apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1 for ServerName
[Sun Sep 07 03:04:41 2014] [warn] _default_ VirtualHost overlap on port 443, the first has precedence

grim76 09-06-2014 09:00 PM

There is a way to run multiple SSL sites on one IP. I have not done it with Apache, but I did a small scale test with Nginx a while back and it does work.


https://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI

TenTenths 09-08-2014 08:49 AM

Quote:

Originally Posted by grim76 (Post 5233622)

Just be aware that Windows XP does not support SNI, so anyone that visits your sites using XP will get errors. This may or may not be important for the OP's server.

"No support for any Internet Explorer version on Windows XP because SNI depends on the SChannel system component shipped with Windows Vista"

HA-Proxy and STUD can do SSL termination though, so it's possible to use these and then pass the request through to a web server running on port 80, thus using HA-Proxy/Stud to do the SSL encryption/decryption.


All times are GMT -5. The time now is 11:23 AM.